15 matches found
CVE-2023-50270
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...
Linux Distros Unpatched Vulnerability : CVE-2022-50270
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b f2fs: show more DIO information in...
CVE-2022-50270
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b "f2fs: show more DIO information in tracepoint" introduces iocb field in 'f2fsdirectIOenter' trace event And it only assigns the pointer and later it accesses its field in...
CVE-2022-50270
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b "f2fs: show more DIO information in tracepoint" introduces iocb field in 'f2fsdirectIOenter' trace event And it only assigns the pointer and later it accesses its field in...
CVE-2022-50270
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b "f2fs: show more DIO information in tracepoint" introduces iocb field in 'f2fsdirectIOenter' trace event And it only assigns the pointer and later it accesses its field in...
CVE-2025-50270
AnQiCMS version v.3.4.11 is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability within its "content management" feature. The root cause is the improper neutralization of input during web page generation, specifically failing to validate or escape data provided in the title, categoryTi...
Linux Distros Unpatched Vulnerability : CVE-2024-50270
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damonfeedloopnextinput damonfeedloopnextinput is inefficien...
BELL-CVE-2024-50270
Bulletin has no description...
CVE-2024-50270
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damonfeedloopnextinput damonfeedloopnextinput is inefficient and fragile to overflows. Specifically, 'scoregoaldiffbp' calculation can overflow when 'score' is high. The calculation is actually...
CVE-2023-50270
creationtimestamp| type| source ---|---|--- 2024-02-20 11:26:27+00:00| seen| https://t.me/ctinow/188362 2024-02-20 11:31:54+00:00| seen| https://t.me/ctinow/188369 2024-02-21 07:40:58+00:00| seen| https://t.me/arpsyndicate/3738...
CVE-2023-50270
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...
CVE-2023-50270 Apache DolphinScheduler: Session do not expire after password change
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...
CVE-2023-50270 Apache DolphinScheduler: Session do not expire after password change
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...
CVE-2023-50270
Apache DolphinScheduler versions before 3.2.0 are vulnerable to Session Fixation due to improper session management within LoginController.java. Specifically, the system fails to deactivate existing sessions when a user changes their password. An attacker could exploit this by sending a specially...
CVE-2023-50270 Apache DolphinScheduler: Session do not expire after password change
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...