2304 matches found
SUSE-SU-2022:2526-1 Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS bsc1200748 - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences bsc1200750 The following non-security bug was fixed: - Fixed a regression in...
chin-den.com Cross Site Scripting vulnerability OBB-2779982
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
critmouse.ru Cross Site Scripting vulnerability OBB-2737170
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
boxenkit.fr Cross Site Scripting vulnerability OBB-2695445
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GSD-2022-1003868 powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/xics: fix refcount leak in icpopalinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...
PT-2022-14253 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: A race condition in several functions of KeyguardServiceWrapper.java and related files could allow an attacker to briefly view what's under the lock screen. This could lead to local...
Denial Of Service (DoS)
bignum is vulnerable to denial of service. The vulnerability exists in .powm function in index.js due to a type-check exception which allows an attacker to cause an application crash...
reggoca.com Cross Site Scripting vulnerability OBB-2504833
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
NVIDIA CUDA Toolkit SDK Integer Overflow Vulnerability
Nvidia NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from Nvidia Corporation. An integer overflow vulnerability exists in the NVIDIA CUDA Toolkit SDK that could be exploited by remote attackers to cause remote code execution,...
libsolv buffer overflow vulnerability (CNVD-2022-15957)
libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...
PT-2022-7268 · Libde265 +4 · Libde265 +4
Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the put qpel fallback function in fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted video file. The...
brainmaps.info Cross Site Scripting vulnerability OBB-2359241
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-46486
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
Fortinet FortiOS Hard-Coded Cryptographic Key (FG-IR-21-051)
The remote host is running a version of FortiOS prior to 5.6.13, 6.0.x prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.8, or 6.4.x prior or equal to 6.4.5, FortiOS-6K7K version prior to 6.2.6 and 6.4.2. It is, therefore, affected by a hard-coded cryptographic key vulnerability in FortiOS...
GSD-2021-1002709 media: mxl111sf: change mutex_init() location
media: mxl111sf: change mutexinit location This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...
SUSE-SU-2021:14867-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2021-4011: The handlers for the RecordCreateContext and RecordRegisterClients requests of the Record extension do not properly validate the request length leading to out of bounds memory write. bsc1190489...
CVE-2021-36133
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...