Discourse 2.9.0.beta5 - 2.9.0.beta9 DoS Vulnerability

Discourse is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"...

PT-2022-20633

Name of the Vulnerable Software and Affected Versions Frontend File Manager Plugin WordPress plugin versions prior to 21.3 Description The issue allows any unauthenticated user to rename uploaded files from users. Due to the lack of validation in the destination filename, this could allow them to...

PT-2022-34707 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue is related to a use-after-free in the efi capsule write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34710 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.328 Description: A use-after-free warning was identified in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34672 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.137 through v5.10.142 Description: A potential off-by-one overflow issue was identified in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-34653 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.145 Description: A potential security issue exists due to a missing lock in the cgroup attach task all function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-34686 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: A use-after-free issue was discovered in the efi capsule write function of the EFI capsule loader. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34673 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.214 Description: A potential security issue has been identified in the Linux Kernel, specifically in the cc2520 tx function. The actual impact and attack plausibility have not yet been proven...

Unbound DNS Resolver < 1.16.3 DoS Vulnerability

Unbound DNS Resolver is prone to a denial of service DoS vulnerability due to a SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2022-23711 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform versions prior to 2022.3.0 Description: The issue is related to insufficient sanitization of inputs in the QoE application input field, which could lead to stored and DOM-based XSS attacks. Recommendations: For versions...

Squid Buffer Overflow Vulnerability (SQUID-2022:2)

Squid is prone to a buffer overflow vulnerability in SSPI and SMB authentication. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

PT-2023-8133 · Apple +4 · Ipados +8

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of th...

Redis 7.0.x < 7.0.5 RCE Vulnerability

Redis is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...

DEBIAN-CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in buildopengopkeypoints goes through all entries in the loop and adds sc-cttsdatai.count to sc-sampleoffsetscount. This can lead to an integer overflow resulting in a small allocation with avcalloc. An...

PT-2022-23928 · WordPress · Themes Awesome History Timeline

Name of the Vulnerable Software and Affected Versions: Themes Awesome History Timeline plugin versions 1.0.5 and earlier Description: The issue is an Authenticated Stored Cross-Site Scripting XSS vulnerability. It affects the Themes Awesome History Timeline plugin at WordPress, allowing potential...

PT-2022-23934 · WordPress · Blossom Recipe Maker

Name of the Vulnerable Software and Affected Versions: Blossom Recipe Maker plugin versions 1.0.7 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...

PT-2022-24198 · Woocommerce · Algolplus Advanced Dynamic Pricing For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2022-20014 · Rocket.Chat · Rocket.Chat Mobile

Name of the Vulnerable Software and Affected Versions: Rocket.Chat Mobile App versions prior to 4.14.1.22788 Description: An issue exists where an attacker with physical access to a mobile device can bypass local authentication, such as a PIN code, due to improper authentication. Recommendations:...

PT-2022-25469 · WordPress · Rate My Post – Wp Rating System

Name of the Vulnerable Software and Affected Versions: Rate my Post – WP Rating System plugin versions = 3.3.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

GHSA-28R9-PQ4C-WP3C personnummer/rust vulnerable to Improper Input Validation

This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...