1949 matches found
GSD-2023-1000572 md/raid0, raid10: Don't set discard sectors for request queue
md/raid0, raid10: Don't set discard sectors for request queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
PT-2023-16110 · Bits And Blooms · Bloom
Name of the Vulnerable Software and Affected Versions: bits-and-blooms/bloom versions prior to 3.3.1 Description: The issue is related to an Uncontrolled Search Path Element in the GitHub repository bits-and-blooms/bloom. Recommendations: For versions prior to 3.3.1, update to version 3.3.1 or...
usememos/memos Improper Authorization vulnerability
usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...
CVE-2022-1196
After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird 91.8 and Firefox ESR 91.8...
PT-2022-27245 · Unknown · Falling-Fruit
Name of the Vulnerable Software and Affected Versions: falling-fruit affected versions not specified Description: A vulnerability has been found in the software, classified as problematic, affecting unknown code and leading to cross-site scripting. The attack can be initiated remotely...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Alist v3.5.1 is vulnerable to Cross Site Scripting XSS via the bulletin board...
PT-2022-36807 · Git +1 · Libredwg
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit read B, dwg decode header variables, and decode R13 RNUMBER. ...
GSD-2022-1008000 netfilter: nf_tables: netlink notifier might race to release objects
netfilter: nftables: netlink notifier might race to release objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...
CVE-2022-43196
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
GO-2022-0972 Panic in github.com/shamaton/msgpack/v2
Unmarshal can panic on some inputs, possibly allowing for denial of service attacks...
GHSA-59HJ-62F5-FGMC free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...
PT-2022-21872 · Hiwin · Hiwin Robot System
Name of the Vulnerable Software and Affected Versions: HIWIN Robot System Software version 3.3.21.9869 Description: The issue arises from the software's failure to properly address the terminated command source. This allows an attacker to craft code that can disconnect the HIWIN Robot System...
CVE-2022-32166 ovs - buffer over-read
In ovs versions v0.90.0 through v2.5.0 are vulnerable to heap buffer over-read in flow.c. An unsafe comparison of “minimasks” function could lead access to an unmapped region of memory. This vulnerability is capable of crashing the software, memory modification, and possible remote execution...
Arbitrary File Upload
octoprint is vulnerable to arbitrary file upload. The vulnerability exists due to misconfiguration in move file functionality which allows an attacker to upload malicious files and change the file extension of the uploaded files...
Arbitrary Code Execution
d8spython is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-strings package of a specific version of d8spython acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system...
GSD-2022-1005477 dmaengine: dw-axi-dmac: ignore interrupt if no descriptor
dmaengine: dw-axi-dmac: ignore interrupt if no descriptor This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
GHSA-2GG5-7C4V-6XX2 Duplicate of GHSA-m77f-652q-wwp4
Duplicate advisory This advisory is a duplicate of GHSA-m77f-652q-wwp4. This link is maintained to preserve external references. Original Description ::fromrequest would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large or infini...
Denial Of Service (DoS)
jpegqs is vulnerable to denial of service. The vulnerability exists due to the floating point exception in the library, allowing an attacker to cause an application crash by providing a malicious input...