KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.
Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports.
Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request Forgery.This issue affects InstaWP Connect: from n/a through 0.1.4.2.
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu.
Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy.
Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP.
Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi.
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with page_size() and records that length in dma_info->size. For a compound folio page_size() is PAGE_SIZE <<…
In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock, racing the unlocked IPv6 route add/delete that mutate the list…
In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __nexthop_replace_notify() walk nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock.…
In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content…
In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's…
Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, after running a per-object-type cleanup. The cleanup switch handled only K_OBJ_MSGQ and K_OBJ_STACK; there was no…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds…
Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu.
In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE open_tree(OPEN_TREE_NAMESPACE) creates a new mount namespace from a copy of the tree at the given path. The caller needs to be privileged over its current user…
In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(), rmdir() and rename() remove the entry from the filesystem, call detach_mounts() on the entry with the inode locked and then call d_delete() once the inode is…
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domain_context_clear_one() and device_pasid_table_teardown() are both invoked once per DMA alias of a device. Each function locates the context entry…
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_mdev_hot_unplug_cfg() function uses the return value of bitmap_andnot() to determine whether the guest APCB needs to be updated. However,…
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting last_vpid=0 when allocating vpid02. nested_vmx_transition_tlb_flush() will always detect a VPID change on first VM-Enter…
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-device MSI permission table: vdev->msi_perm = kmalloc_obj(struct perm_bits, GFP_KERNEL_ACCOUNT); if…
Błąd walidacji wskaźników w AIX vSCSI umożliwia eskalację uprawnień lub całkowity kompromis.
Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów.
Brak autoryzacji w pardus-software umożliwia wstrzyknięcie argumentów.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI… | Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8. |
Obserwuj | 8,8 | 0,17 % | ||
| Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to… | Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to create forged holiday/work-time entries via crafted ICS imports. |
Obserwuj | 8,8 | 0,17 % | ||
| Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request Forgery.This issue… | Cross-Site Request Forgery (CSRF) vulnerability in InstaWP InstaWP Connect instawp-connect allows Cross Site Request Forgery.This issue affects InstaWP Connect: from n/a through 0.1.4.2. |
Obserwuj | 8,8 | 0,17 % | ||
| Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Obserwuj | 8,8 | 0,17 % | ||
| Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu. | Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu. |
Obserwuj | 8,8 | 0,17 % | ||
| Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy. | Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy. |
Obserwuj | 8,8 | 0,17 % | ||
| Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP. | Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP. |
Obserwuj | 8,7 | 0,67 % | ||
| Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi. | Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi. |
Obserwuj | 8,7 | 0,67 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large… | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with page_size() and records that length in dma_info->size. For a compound folio page_size() is PAGE_SIZE <<… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in… | In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock, racing the unlocked IPv6 route add/delete that mutate the list… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and… | In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __nexthop_replace_notify() walk nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock.… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from… | In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory… | In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's… |
Obserwuj | 8,8 | 0,17 % | ||
| Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data))… | Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, after running a per-object-type cleanup. The cleanup switch handled only K_OBJ_MSGQ and K_OBJ_STACK; there was no… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds… |
Obserwuj | 8,8 | 0,17 % | ||
| Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu. | Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu. |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in… | In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE open_tree(OPEN_TREE_NAMESPACE) creates a new mount namespace from a copy of the tree at the given path. The caller needs to be privileged over its current user… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on… | In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(), rmdir() and rename() remove the entry from the filesystem, call detach_mounts() on the entry with the inode locked and then call d_delete() once the inode is… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down… | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with correct SID when tearing down aliases domain_context_clear_one() and device_pasid_table_teardown() are both invoked once per DMA alias of a device. Each function locates the context entry… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain… | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_mdev_hot_unplug_cfg() function uses the return value of bitmap_andnot() to determine whether the guest APCB needs to be updated. However,… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is… | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting last_vpid=0 when allocating vpid02. nested_vmx_transition_tlb_flush() will always detect a VPID change on first VM-Enter… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init… | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-device MSI permission table: vdev->msi_perm = kmalloc_obj(struct perm_bits, GFP_KERNEL_ACCOUNT); if… |
Obserwuj | 8,8 | 0,16 % | ||
| Błąd walidacji wskaźników w AIX vSCSI umożliwia eskalację uprawnień lub całkowity kompromis. | Błąd walidacji wskaźników w AIX vSCSI umożliwia eskalację uprawnień lub całkowity kompromis. |
Obserwuj | 8,8 | 0,16 % | ||
| Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów. | Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów. |
Obserwuj | 8,7 | 0,66 % | ||
| Brak autoryzacji w pardus-software umożliwia wstrzyknięcie argumentów. | Brak autoryzacji w pardus-software umożliwia wstrzyknięcie argumentów. |
Obserwuj | 8,8 | 0,16 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.