CVE-2021-42654

SiteServer CMS V5.1 is affected by an unrestricted upload of a file with dangerous type getshell, which could be used to execute arbitrary code...

GSD-2022-1002264 soc: qcom: rpmpd: Check for null return of devm_kcalloc

soc: qcom: rpmpd: Check for null return of devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002112 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001577 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001270 ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting

ASoC: xilinx: xlnxformatterpcm: Handle sysclk setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

CVE-2022-26251

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

Code injection

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

Code injection

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

CVE-2022-26250

Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges...

CVE-2022-26251

The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges...

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

Cross site request forgery (csrf)

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

CVE-2022-25523

CVE-2022-25523 corresponds to a CSRF vulnerability in TypesetterCMS v5.1, exploitable via a crafted POST request. The connected documents corroborate a cross-site request forgery issue in the same version, with no public details on affected endpoints or patches provided here. There is no explicit...

CVE-2022-25523

TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery CSRF which is exploited via a crafted POST request...

GSD-2022-1000741 nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

nfp: flower: Fix a potential leak in nfptunneladdsharedmac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

GSD-2022-1000630 net/smc: Transitional solution for clcsock race issue

net/smc: Transitional solution for clcsock race issue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit...

GSD-2022-1000424 misc: fastrpc: avoid double fput() on failed usercopy

misc: fastrpc: avoid double fput on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.24 by commit...

GSD-2022-1000337 misc: fastrpc: avoid double fput() on failed usercopy

misc: fastrpc: avoid double fput on failed usercopy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.180 by commit...