14 matches found
ROOT-OS-UBUNTU-2404-CVE-2025-37906 CVE-2025-37906 in rootio-linux - Patched by Root
Root has patched CVE-2025-37906 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-37906 CVE-2025-37906 in rootio-linux - Patched by Root
Root has patched CVE-2025-37906 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2025-37906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ublk: fix race between iouringcmdcompleteintask and ublkcancelcmd ublkcancelcmd calls iouringcmddone to complete uringcmd, but we may have scheduled task work v...
CVE-2022-37906
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of the vulnerability results in the ability to delete arbitrary files on the underlying operating system...
CVE-2025-37906
CVE-2025-37906 arises in the Linux kernel’s ublk subsystem, due to a race between io_uring_cmd_complete_in_task and ublk_cancel_cmd. The description states that ublk_cancel_cmd() may call io_uring_cmd_done() to complete uring_cmd, while task work scheduled by io_uring_cmd_complete_in_task() could...
CVE-2024-37906
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the...
CVE-2024-37906 Admidio has Blind SQL Injection in ecard_send.php
Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the /admprogram/modules/ecards/ecardsend.php source file of the Admidio Application. The SQL Injection results in a compromise of the...
CVE-2024-37906
creationtimestamp| type| source ---|---|--- 2024-07-27 18:46:11+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-69wx-xc6j-28v3 2024-08-05 11:10:43+00:00| published-proof-of-concept| https://t.me/HackingInsights/8670...
Discourse < 3.0.6 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
CVE-2023-37906
creationtimestamp| type| source ---|---|--- 2023-07-28 20:29:30+00:00| seen| https://t.me/cibsecurity/67390...
CVE-2023-37906
CVE-2023-37906 affects the Discourse open source platform. Prior to version 3.0.6 (stable) and 3.1.0.beta7 (beta/tests-passed) , a malicious user could edit a post in a topic with a crafted edit reason to trigger a DoS. The vulnerability is patched in 3.0.6 (stable) and 3.1.0.beta7 (beta/tests-pa...
CVE-2023-37906 Discourse vulnerable to DoS via post edit reason
Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, a malicious user can edit a post in a topic and cause a DoS with a carefully crafted edit reason. The issue is patched in version 3.0.6 of th...
CVE-2022-37906
CVE-2022-37906 is an authenticated path-traversal vulnerability in the ArubaOS command line interface. The issue allows an attacker with user-level access to delete arbitrary files on the underlying operating system by abusing CLI paths. Multiple sources confirm ArubaOS CLI exposure and the impac...
Linux kernel 2.6.x mmap()和mremap()调用本地拒绝服务漏洞
BUGTRAQ ID: 37906 CVE ID: CVE-2010-0291 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的某些mmap和mremap调用可能泄露内存内存,本地用户可以利用这个漏洞耗尽所有可用的内存,导致拒绝服务。 Linux kernel 2.6.x 厂商补丁: Debian ------ Debian已经为此发布了一个安全公告(DSA-1996-1)以及相应补丁: DSA-1996-1:New Linux 2.6.26 packages fix several vulnerabilities...