PT-2022-16358 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: A flaw in the Keylime agent's logic for checking secure mounts can be exploited, allowing secrets to be leaked to other processes on the host. This occurs because previously created unprivileged...

PT-2022-24187 · WordPress · Awesome Support

Name of the Vulnerable Software and Affected Versions: Awesome Support plugin versions = 6.0.7 Description: The issue is related to a Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerability. This vulnerability affects the Awesome Support plugin at WordPress, where users with a...

KLA19258 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be exploited to execute...

PT-2022-28157 · Python +8 · Python +9

Name of the Vulnerable Software and Affected Versions: personnummer versions prior to 3.0.3 Dart versions prior to 3.0.3 C versions prior to 3.0.2 Elixir versions prior to 3.0.0 Go versions prior to 3.0.1 Java versions prior to 3.3.0 JavaScript versions prior to 3.1.0 Kotlin versions prior to 1.1...

PT-2022-34357 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue concerns the ext4 filesystem, specifically avoiding resizing to a partial cluster size. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.257 Description: A potential divide by zero error in the fb pm2fb function of the Linux Kernel may pose a security risk. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-34157 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak was discovered in the meson-secure-pwrc.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33755 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential issue exists due to a lack of proper locking, which could lead to a data race. The actual impact and likelihood of an attack have not been confirmed. Recommendations: For versio...

PT-2022-34152 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a refcount leak in the omapdss init of function. It was introduced in version v4.20 and fixed in Linux Kernel version v5.10.137. The actual impact and attack...

PT-2022-33888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the hinic get stats64 function, which may cause a kernel hang. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prio...

PT-2022-33773 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.9 through v5.15.62 Description: A memory leak issue exists in the vsock connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.9 through...

PT-2022-34035 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: The issue is related to the gadgetfs ep io, where it waits until IRQ finishes. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-33840 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to an error unwind in the rxe create qp function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-34067 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns a check in the ext4 file system to ensure a directory block is within the i size boundary. The actual impact and potential for attack have not been fully determined...

PT-2022-34281 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A buffer overflow issue exists in the cp2112 xfer function, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-33804 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the assignment of scpi info in the arm scpi firmware. If the probe fails, scpi info should not be assigned. The actual impact and attack plausibility of this issue...

PT-2022-34159 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a platform-device leak in the error path of the x86/pmem component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33944 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.15.60 Description: The issue is related to an off-by-one error in nvbios addr within the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2022-34001 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.140 Description: The issue is related to data-races around sysctl fb tunnels only for init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2022-34259 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.22 through 5.4.210 Description: A divide-by-zero bug was found in the ark set pixclock function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 2.6.22...