A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.

...

GSD-2022-1002069 cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001816 cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001503 cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001184 cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse

cpufreq: qcom-cpufreq-nvmem: fix reading of PVS Valid fuse This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-30342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a problem with reading the PVS Valid fuse in the cpufreq: qcom-cpufreq-nvmem driver. The actual impact and potential for attack have not been proven yet. Recommendations F...

PT-2022-30089

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.15.32 Description The issue concerns a problem with reading the PVS Valid fuse in the cpufreq: qcom-cpufreq-nvmem driver. The actual impact and potential for attack have not been proven yet. Recommendation...

PT-2022-29776

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns a fix for reading the PVS Valid fuse in the cpufreq: qcom-cpufreq-nvmem driver. It was introduced in version v5.7 and fixed in version v5.16.19. The actual impact and attac...

PT-2022-29457

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.17.1 Description The issue concerns a problem with reading the PVS Valid fuse in the cpufreq driver. It was introduced in version v5.7 and fixed in version v5.17.2. The actual impact and attack plausibilit...

PT-2022-29262

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the virt addr valid function in the Linux Kernel, specifically affecting 64-bit Book3E and 32-bit architectures. The actual impact and potential for attack have not been...

PT-2022-29608

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns the virt addr valid function in the Linux Kernel, specifically affecting 64-bit Book3E and 32-bit architectures. The actual impact and potential for attack have not been...

PT-2022-30443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to the virt addr valid function in the Linux Kernel, specifically affecting 64-bit Book3E and 32-bit architectures. The actual impact and potential for attack have not be...

PT-2022-30237

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue concerns the virt addr valid function in the Linux Kernel, specifically affecting 64-bit Book3E and 32-bit architectures. The actual impact and potential for attack have not been...

PT-2022-29935

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns the virt addr valid function in the Linux Kernel, specifically affecting 64-bit Book3E and 32-bit architectures. The actual impact and potential for attack have not been...

CVE-2022-28868

An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time until the page loads to think content may be coming from a valid domain, while the content comes from the...

Code injection

An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...

PT-2022-17975

Name of the Vulnerable Software and Affected Versions EasyIO CPT Graphics version 0.8 Description An issue in the application allows attackers to discover valid users. Recommendations For EasyIO CPT Graphics version 0.8, at the moment, there is no information about a newer version that contains a...

Johnson Controls EasyIO CPT Graphics 安全漏洞

Johnson Controls EasyIO CPT Graphics is a built-in graphics feature of an open source software programming tool from Johnson Controls, Inc. It is used to create graphic pages that can be viewed in a Web browser. A security vulnerability exists in Johnson Controls EasyIO CPT Graphics version v0.8...

PT-2025-7995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically related to the virt addr valid function on 64-bit Book3E and 32-bit systems. The issue arises because pa returns 0 f...

Information disclosure

An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisheracl, if a user configured in the publisheracl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid,...