21 matches found
Photon OS 5.0: Grub2 PHSA-2025-5.0-92-0477
An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0477. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-45782
creationtimestamp| type| source ---|---|--- 2026-06-10 01:07:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvjj7zznp2v...
CVE-2026-45782 Cloud Hypervisor: Use-after-free in virtio-block Async I/O Completion
Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor chains that reuse the same headindex while asynchronous block I/O is enabled e....
CVE-2024-45782 affecting package grub2 for versions less than 2.06-15
CVE-2024-45782 affecting package grub2 for versions less than 2.06-15. A patched version of the package is available...
Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2025-1907)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-45782
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...
Linux Distros Unpatched Vulnerability : CVE-2024-45782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided...
CVE-2024-45782
creationtimestamp| type| source ---|---|--- 2025-03-03 17:31:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6242 2025-03-03 19:44:22+00:00| seen| https://t.me/cvedetector/19390 2025-03-25 05:23:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8594 2025-08-19 13:26:46+00:00| seen|...
CVE-2024-45782 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer,...
CVE-2024-45782 Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer,...
SUSE SLES15: grub2 / grub2-arm64-efi / grub2-i386-pc / grub2-powerpc-ieee1275 / etc (SUSE-SU-2025:0588-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0588-1 advisory. - CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 ...
BELL-CVE-2024-45782
Bulletin has no description...
CVE-2024-45782
A flaw was found in the HFS filesystem. When reading an HFS volume's name at grubfsmount, the HFS filesystem driver performs a strcpy using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer,...
CVE-2022-45782
creationtimestamp| type| source ---|---|--- 2023-02-02 00:16:38+00:00| seen| https://t.me/cibsecurity/57362 2025-03-27 16:26:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9132...
CVE-2022-45782
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...
CVE-2022-45782
CVE-2022-45782 affects dotCMS core versions 5.3.8.5–5.3.8.15 and 21.03–22.10.1. The root cause is a cryptographically insecure random generation algorithm used for password-reset token generation, enabling account takeover. The connected documents confirm this vulnerability and its impact. No rem...
CVE-2022-45782
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover...
CVE-2021-45782
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
