27 matches found
CVE-2026-41848 Spring Framework Denial of Service via AntPathMatcher
Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: matchString pattern, String path, matchStartString pattern, String pat...
ROOT-OS-UBUNTU-2404-CVE-2022-41848 CVE-2022-41848 in rootio-linux - Patched by Root
Root has patched CVE-2022-41848 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-41848 CVE-2022-41848 in rootio-linux - Patched by Root
Root has patched CVE-2022-41848 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2023-41848
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2...
CVE-2021-41848
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary shell script and arbitrary ARM binary, where both will be executed as the root user with an...
Linux Distros Unpatched Vulnerability : CVE-2022-41848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/char/pcmcia/synclinkcs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker remove...
CVE-2023-41848
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2...
CVE-2023-41848 WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2...
CVE-2023-41848
CVE-2023-41848 affects the WordPress Carousel Slider plugin, versions
CVE-2023-41848 WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Carousel Slider: from n/a through 2.2.2...
CVE-2024-41848
creationtimestamp| type| source ---|---|--- 2024-08-23 19:38:52+00:00| seen| https://t.me/cvedetector/4028...
WordPress Carousel Slider Plugin <= 2.2.2 is vulnerable to Broken Access Control
Software Carousel Slider Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41848 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID ed609f73728e Credits Nguyen Anh Tien Required...
CVE-2022-41848 affecting package kernel 5.10.185.1-1
CVE-2022-41848 affecting package kernel 5.10.185.1-1. A patched version of the package is available...
CVE-2022-41848 affecting package kernel for versions less than 5.15.122.1-2
CVE-2022-41848 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...
SUSE: Security Advisory (SUSE-SU-2022:3844-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:3775-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:3688-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : kernel (SUSE-SU-2022:3688-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3688-1 advisory. - Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware...
SUSE-SU-2022:3688-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking bnc1203769. - CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c...
SUSE SLES12 Security Update : kernel (SUSE-SU-2022:3584-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3584-1 advisory. - In mmcblkreadsingle of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to...