1566 matches found
PT-2022-33772 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the btrfs filesystem, specifically in the prepare to relocate function, where the reloc control is not unset if a transaction commit fails. The actual impact and...
PT-2022-33740 · Habana · Habanalabs/Gaudi
Name of the Vulnerable Software and Affected Versions: habanalabs/gaudi versions prior to v5.15.63 Description: The issue is related to a shift out of bounds, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not yet been proven. The...
PT-2022-33853 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A refcount leak was discovered in the esdhc signal voltage switch function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-33771 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a potential security vulnerability in the Linux Kernel, where a semaphore is not properly released. This problem was introduced in version v5.8 and is fixed in versi...
PT-2022-34075 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.135 through 5.10.136 Description: A regression issue in the L2CAP component of the Bluetooth protocol was identified. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux...
PT-2022-33630 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the handling of SR SPIE set/clear in the riscv uprobe fix. It was introduced in version v5.12 and fixed in version v5.19.2. The actual impact and attack plausibility have...
PT-2022-33679 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.65 Description: The issue is related to setting the DMA mask for the udmabuf device. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...
PT-2022-33656 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: The issue concerns preventing out-of-bounds access. It was introduced in version v5.9 and fixed in Linux Kernel version v5.15.66. The actual impact and attack plausibility have not yet been...
CVE-2022-38542
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the killsession interface. The project has released an update, please upgrade to v1.9.0 and above...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10119-1 Rating: important References: 1202403 1202964 1203102 Cross-References: CVE-2022-3038 CVE-2022-3039 CVE-2022-3040 CVE-2022-3041 CVE-2022-3042 CVE-2022-3043 CVE-2022-3044 CVE-2022-3045 CVE-2022-3046...
PT-2022-23182 · Unknown · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform Old Core versions prior to 14.2 and 13.10.4 Description: The issue allows all rights checks that would normally prevent a user from viewing a document on a wiki to be bypassed using the login action and directly specified...
Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Scale (CVE-2022-22475)
Summary There is a vulnerability in IBM WebSphere Application Server Liberty, used by IBM Spectrum Scale, which could allow identity spoofing by an authenticated user. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 throug...
CVE-2022-36051
ZITADEL’s CVE-2022-36051 refers to a Broken Authorization in Actions, where users with role ORG_OWNER could create Javascript Code invoked during login to grant authorizations for projects owned by other organizations within the same instance. The issue stems from a missing authorization check in...
Ubuntu: Security Advisory (USN-60-0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3993-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-23859 · 72Crm · 72Crm
Name of the Vulnerable Software and Affected Versions: 72crm version 9.0 Description: The issue is related to an Arbitrary file upload vulnerability. Recommendations: For 72crm version 9.0, update to a version that contains a fix for this issue...
PT-2022-22397 · Unknown · Smartypants Sp Project & Document Manager
Name of the Vulnerable Software and Affected Versions: smartypants SP Project & Document Manager plugin versions = 4.59 Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, potentially allowing them to...
Adobe Magento Open Source 安全漏洞
Magento Open Source is provides basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...
PT-2022-22400 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions 13.1.x BIG-IP versions 14.1.x before 14.1.5 BIG-IP versions 15.1.x before 15.1.6.1 BIG-IP versions 16.1.x before 16.1.3.1 Description: When an LTM virtual server is configured to perform normalization, undisclosed requests can...