Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix data race on CQP request done
KCSAN detects a data race on cqp_request->request_done memory location
which is accessed locklessly in irdma_handle_cqp_op while being
updated in irdma_cqp_ce_handler.
Annotate…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: double free xprt_ctxt while still in use
When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out
of the svc_rqst into the svc_deferred_req.
When the deferred request is revisited, the pointer is copied…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: prevent skb corruption on frag list segmentation
Ian reported several skb corruptions triggered by rx-gro-list,
collecting different oops alike:
[ 62.624003] BUG: kernel NULL pointer dereference, address:…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can submit sshguard threshold, block time, or detection time values…
Opis źródłowy NVD · ENCVSS 8,6 · EPSS 6,55 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 64
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 65
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard (SecuredSessionFactoryImpl) treats a command with no matching ACL rule as allowed, so any authenticated shell session (including one holding only the viewer role) could run…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/getacumper_post'.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
ip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the
quoted inner IPv6 packet, and then passes the clone to icmpv6_send().
The clone still carries the outer packet's…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
CVSS
9,8
EPSS
0,54 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix data race on CQP request done
KCSAN detects a data race on cqp_request->request_done memory location
which is accessed locklessly in irdma_handle_cqp_op while being
updated in irdma_cqp_ce_handler.
Annotate…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: double free xprt_ctxt while still in use
When an RPC request is deferred, the rq_xprt_ctxt pointer is moved out
of the svc_rqst into the svc_deferred_req.
When the deferred request is revisited, the pointer is copied…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net: prevent skb corruption on frag list segmentation
Ian reported several skb corruptions triggered by rx-gro-list,
collecting different oops alike:
[ 62.624003] BUG: kernel NULL pointer dereference, address:…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as root via Login Protection settings. Attackers can submit sshguard threshold, block time, or detection time values…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,6 · EPSS 6,55 % · rekomendacja wg zapisanej polityki
A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
fontTools is a library for manipulating fonts, written in Python. In versions from 4.33.0 to before 4.60.2, the fonttools varLib (or python3 -m fontTools.varLib) script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed.…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 64
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 65
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 67
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these vulnerabilities.When Tag is 131
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,55 % · rekomendacja wg zapisanej polityki
The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard (SecuredSessionFactoryImpl) treats a command with no matching ACL rule as allowed, so any authenticated shell session (including one holding only the viewer role) could run…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/getacumper_post'.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
ip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the
quoted inner IPv6 packet, and then passes the clone to icmpv6_send().
The clone still carries the outer packet's…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,54 % · rekomendacja wg zapisanej polityki
9,8
0,54 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.