10 matches found
CVE-2021-47132
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix skforwardmemory corruption on retransmission MPTCP skforwardmemory handling is a bit special, as such field is protected by the msk socket spinlock, instead of the plain socket lock. Currently we have a code path...
CVE-2021-47132
creationtimestamp| type| source ---|---|--- 2024-03-15 22:27:21+00:00| seen| https://t.me/ctinow/209220 2024-03-16 19:31:46+00:00| seen| https://t.me/ctinow/209676...
CVE-2021-47132
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix skforwardmemory corruption on retransmission MPTCP skforwardmemory handling is a bit special, as such field is protected by the msk socket spinlock, instead of the plain socket lock. Currently we have a code path...
CVE-2021-47132
CVE-2021-47132 refers to a Linux kernel issue in the MPTCP code where sk_forward_memory could be corrupted during retransmission due to unsafe updates that did not acquire the msk spin lock. A fix was introduced that adds a new variant of the blamed function which explicitly acquires the msk spin...
CVE-2023-47132
creationtimestamp| type| source ---|---|--- 2024-02-09 00:26:28+00:00| seen| https://t.me/ctinow/181726 2024-03-02 17:41:41+00:00| seen| https://t.me/ctinow/198430 2025-06-11 17:34:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18102...
CVE-2023-47132
An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API calls...
CVE-2023-47132
CVE-2023-47132 pertains to N-able N-central (pre-2023.6) where an API-call related flaw allows privilege escalation. Affected software: N-able N-central before 2023.6; impact is elevated privileges via API calls (no user interaction required). Mitigation: upgrade to version 2023.6 or later (per v...
CVE-2022-47132
creationtimestamp| type| source ---|---|--- 2023-02-03 07:25:21+00:00| seen| https://t.me/cibsecurity/57434...
CVE-2022-47132
CVE-2022-47132 affects Academy LMS prior to v5.10, where a CSRF vulnerability allows an attacker to arbitrarily add Administrator users. The issue stems from CSRF in the admin-creation workflow; CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no privileges required, user interaction r...
SQL Injection Vulnerability in Waychar Enrollment System (CNVD-2021-47132)
Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...