CVE-2022-30284

Removed by vendor...

Fedora: Security Advisory for golang-github-envoyproxy-protoc-gen-validate (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-envoyproxy-protoc-gen-validate (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: golang-github-envoyproxy-protoc-gen-validate-0.4.1-5.fc34

Protoc plugin to generate polyglot message validators...

[SECURITY] Fedora 35 Update: golang-github-envoyproxy-protoc-gen-validate-0.4.1-5.fc35

Protoc plugin to generate polyglot message validators...

Potential Captcha Validate Bypass in flask-session-captcha

Impact flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. The captcha.validate function would return None if passed no value e.g. by submitting a request with an empty form. If implementing users were checking th...

Insecure Return Value

flasksessioncaptcha has insecure return value. The vulnerability exists in validate function in init.py because it returns None instead of False if no value passed which allows an attacker to bypass the checks...

ALPINE-CVE-2022-24792

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...

Cross-site Scripting (XSS)

xml2rfc is vulnerable to cross-site scripting. The vulnerability exists in the validate function in base.py due to lack of input validation which allows an attacker to inject and craft svg images embedded with malicious scripts...

PT-2022-13435

Name of the Vulnerable Software and Affected Versions Donations WordPress plugin versions prior to 1.8 Description The issue arises from the lack of sanitization and escaping of the nd donations id parameter in SQL statements. This occurs via the /wp-admin/admin-ajax.php AJAX action, specifically...

GSD-2022-1002256 udmabuf: validate ubuf->pagecount

udmabuf: validate ubuf-pagecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit 5d50f851dd307c07ca5591297093f19967c834a9, it...

GSD-2022-1001556 udmabuf: validate ubuf->pagecount

udmabuf: validate ubuf-pagecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit a3728d32fc61eb0fe283cb8ff60b2c8f751e2202, it...

GSD-2022-1001247 udmabuf: validate ubuf->pagecount

udmabuf: validate ubuf-pagecount This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit 9e9b4a269f84d3230f2af84ff42322db676440d9, it...

PT-2022-29610

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the lack of FPU protection for dcn30 internal validate bw in the drm/amd/display component. The actual impact and attack plausibility have not yet been proven...

PT-2022-29265

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the lack of FPU protection for dcn30 internal validate bw in the drm/amd/display component. The actual impact and attack plausibility have not yet been proven...

nuclei-templates

This repository is a collection of community-curated templates for the nuclei engine to find security vulnerabilities in applications. The templates are stored in the cves/ directory and are used by the nuclei scanner to identify potential vulnerabilities. The repository also contains workflows f...

PYSEC-2022-194

PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In versions prior to 1.27.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop if the PyPDF2 if the code attempts to get the content...

istio:fuzz_v1alpha1_validate_config: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5187774237507584 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzv1alpha1validateconfig Job Type: libfuzzerasanistio Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address...

CVE-2021-39814

In ppmpvalidatewsm of drmfw.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

PT-2022-11084

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an incorrect bounds check in the ppmp validate wsm function of drm fw.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege, requiring Syste...