Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
nvme-multipath: fix flex array size in struct nvme_ns_head
struct nvme_ns_head contains a flexible array member, current_path[],
which is indexed using the NUMA node ID:
head->current_path[numa_node_id()]
The structure is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: ensure inner headers in ICMP errors are in headroom
Sashiko points out that after stripping the outer headers
with pskb_pull() we should ensure the inner IP headers
in ICMP errors from tunnels are present in the skb…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tt: prevent TVLV OOB check overflow
A TT unicast TVLV contains the number of VLANs stored in it. This number is
an u16 and gets multiplied by the size of the struct
batadv_tvlv_tt_vlan_data (8 bytes). The size can…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the requesting user can…
Opis źródłowy NVD · ENCVSS 9,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject…
Opis źródłowy NVD · ENCVSS 9,3 · EPSS 3,25 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gue: validate REMCSUM private option length
GUE private flags can indicate that remote checksum offload metadata is
present. The private flags field itself is accounted for by
guehdr_flags_len(), but guehdr_priv_flags_len()…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix off-by-one in BD ring consumption on build_skb failure
qede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a
NULL return from qede_build_skb(). When it returns NULL under memory
pressure, the functions…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
nvme-multipath: fix flex array size in struct nvme_ns_head
struct nvme_ns_head contains a flexible array member, current_path[],
which is indexed using the NUMA node ID:
head->current_path[numa_node_id()]
The structure is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvs: ensure inner headers in ICMP errors are in headroom
Sashiko points out that after stripping the outer headers
with pskb_pull() we should ensure the inner IP headers
in ICMP errors from tunnels are present in the skb…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: tt: prevent TVLV OOB check overflow
A TT unicast TVLV contains the number of VLANs stored in it. This number is
an u16 and gets multiplied by the size of the struct
batadv_tvlv_tt_vlan_data (8 bytes). The size can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,76 % · rekomendacja wg zapisanej polityki
An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation allows an attacker to gain administrative privileges leading to complete compromise of the AOS-8 host.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
The JAY Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.01. This is due to incorrect authentication checking in the 'jay_login_register_process_switch_back' function with the 'jay_login_register_process_switch_back' cookie value.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a browser-extension channel signed data taken from the request itself and stored the result where the requesting user can…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,9 · EPSS 0,25 % · rekomendacja wg zapisanej polityki
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat(), cut(), or merge() can inject…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,3 · EPSS 3,25 % · rekomendacja wg zapisanej polityki
IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
gue: validate REMCSUM private option length
GUE private flags can indicate that remote checksum offload metadata is
present. The private flags field itself is accounted for by
guehdr_flags_len(), but guehdr_priv_flags_len()…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix off-by-one in BD ring consumption on build_skb failure
qede_rx_build_skb() and qede_tpa_rx_build_skb() do not check for a
NULL return from qede_build_skb(). When it returns NULL under memory
pressure, the functions…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,75 % · rekomendacja wg zapisanej polityki