Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
The MPCIFC instruction doesn't allow registering adapter interrupts without
first unregistering. So reject any request to enable interrupt forwarding
if its…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: bound DMA command body size against suffix pointer
vmw_cmd_dma() locates the DMA suffix at
(unsigned long) &cmd->body + header->size - sizeof(*suffix)
without checking that header->size is large enough to contain…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Fix handling of AIF enable without AISB
When a guest seeks to register IRQs without a summary bit specified,
ensure that the associated GAITE then stores 0 for the guest AISB
location instead of…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type.…
Opis źródłowy NVD · ENCVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: vsie: zero stale crypto bits
When shadowing crypto access bits from a format0 apcb (crycb 0 or 1),
the bits 64..255 are unchanged from whatever is in the vsie page in the
crycb and thus in the apcb. This gives a…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: do not arm the ageing timer on a device that is down
vxlan_changelink() arms vxlan->age_timer whenever the requested ageing
interval differs from the configured one:
if (conf.age_interval !=…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 1,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
The MPCIFC instruction doesn't allow registering adapter interrupts without
first unregistering. So reject any request to enable interrupt forwarding
if its…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: bound DMA command body size against suffix pointer
vmw_cmd_dma() locates the DMA suffix at
(unsigned long) &cmd->body + header->size - sizeof(*suffix)
without checking that header->size is large enough to contain…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pci: Fix handling of AIF enable without AISB
When a guest seeks to register IRQs without a summary bit specified,
ensure that the associated GAITE then stores 0 for the guest AISB
location instead of…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication. While the primary web interface on port 80 enforces authentication, the backdoor service allows any remote attacker to retrieve image snapshots by…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service permanently by sending structurally valid JSON that does not match the handler's expected type.…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,7 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: vsie: zero stale crypto bits
When shadowing crypto access bits from a format0 apcb (crycb 0 or 1),
the bits 64..255 are unchanged from whatever is in the vsie page in the
crycb and thus in the apcb. This gives a…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
vxlan: do not arm the ageing timer on a device that is down
vxlan_changelink() arms vxlan->age_timer whenever the requested ageing
interval differs from the configured one:
if (conf.age_interval !=…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 1,13 % · rekomendacja wg zapisanej polityki
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki