The vulnerability of the nilfs_attach_log_writer function (fs/nilfs2/segment.c) in the Linux kernel’s BPF component allows a attacker to cause a service failure.

The vulnerability of the nilfsattachlogwriter function located in segment.c of fs/nilfs2 in the Linux kernel’s BPF component is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number, allowing an attacker to execute any code in the target system.

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number during the Auto Attach TLV process. Exploiting this vulnerability allows an attacker to send specially crafted LLDP messages to the vulnerable system, causing a full number of significant...

The vulnerability of the Open vSwitch multi-level switch software, related to the loss of the significance of a whole number, allows an attacker to execute arbitrary code in the target system.

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number during the analysis of Auto Attach TLV. Exploiting this vulnerability allows an attacker to send specially crafted LLDP messages to the vulnerable system, causing a full number of significa...

GSD-2023-1000789 drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure

drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000622 bpf: prevent leak of lsm program after failed attach

bpf: prevent leak of lsm program after failed attach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33866 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to the removal of a panel on DSI attach failure in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2023-34558

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the removal of a panel on DSI attach failure in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2023-34255

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.1 through v5.15.85 Description A potential issue exists where the panel is not properly removed on DSI attach failure. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2023-33699

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to a potential leak of lsm program after a failed attach. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

Vulnerability found in SugarCRM

A new vulnerability may have been found in SugarCRM. The vulnerability allows an unauthenticated remote malicious person able to bypass authentication and execute arbitrary code execute arbitrary code on the Web server. The described vulnerability is said to be located in the AttachFiles action o...

PT-2023-1101 · Unknown +6 · Openvswitch +6

Name of the Vulnerable Software and Affected Versions: OpenvSwitch affected versions not specified Description: The issue is related to an out-of-bounds read in Organization Specific TLV found in OpenvSwitch. It can be exploited by sending specially crafted LLDP messages to the vulnerable system,...

PT-2022-38213

Уязвимость функции bpf prog attach модуля kernel/bpf/syscall.c поддержки интерпретатора BPF ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-49704

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3-next 370 Description A use-after-free issue exists in the ext4 filesystem's orphan inode cleanup routine. Specifically, when the ext4 inode attach jinode function fails with -ENOMEM during orphan cleanu...

PT-2024-11881

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ Description A null pointer dereference issue has been identified in the Linux kernel. The issue occurs when the probe function fails in phy attach direct, causing a null pointer dereference in device...

xdg-utils 安全漏洞

xdg-utils is a software from the xdg organization that provides integrated functionality for desktop systems. A security vulnerability exists in xdg-utils xdg-mail that stems from incorrect URL parsing when configured to use thunderbird's mailto URL, which may result in passing additional headers...

AZL-11388 CVE-2022-40284 affecting package ntfs-3g for versions less than 2022.10.3-1

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...

Exploit for Code Injection in Apache Commons_Text

cve-2022-42889-intercept It should be noted that versions...

CVE-2022-42154

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-26287 · 74Cmsse · 74Cmsse

Name of the Vulnerable Software and Affected Versions: 74cmsSE version 3.13.0 Description: An arbitrary file upload issue in the "/api/admin/upload/attach" API endpoint allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For 74cmsSE version 3.13.0, consider disabli...

CVE-2022-42154: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...