Lucene search
K

23 matches found

OSV
OSV
added 2026/06/08 5:16 p.m.4 views

UBUNTU-CVE-2026-46309

In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise Add validation in xevmmadviseioctl to reject PAT indices with XECOHNONE coherency mode when applied to CPU cached memory. Using cohnone with CPU cached buffer...

4.8CVSS5.2AI score0.00164EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/06/08 3:50 p.m.36 views

CVE-2026-46309 drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise

In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise Add validation in xevmmadviseioctl to reject PAT indices with XECOHNONE coherency mode when applied to CPU cached memory. Using cohnone with CPU cached buffer...

0.00164EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.6 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from insufficient PAT index verification in the madvice function within the drm xe uapi layer. This...

5.3AI score0.00164EPSS
Exploits0References2
Veracode
Veracode
added 2025/11/28 6:16 a.m.5 views

Cross-Site Scripting (XSS)

qwc2 is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-supplied input in the attribute table, which allows an authorized attacker to inject and execute arbitrary JavaScript code...

6.9CVSS6.5AI score0.00401EPSS
Exploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/11/02 1:2 a.m.3 views

x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()

...

5.5CVSS8.8AI score0.00168EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/14 9:46 a.m.4 views

CVE-2025-11183

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.4AI score0.00401EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/13 12:31 p.m.3 views

EUVD-2025-34062

QGIS QWC2 Cross-Site Scripting vulnerability...

6.9CVSS5.8AI score0.00401EPSS
Exploits0References3
OSV
OSV
added 2025/10/13 12:31 p.m.2 views

GHSA-GXP8-M5RQ-3M38 QGIS QWC2 Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.5AI score0.00401EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/10/13 12:31 p.m.7 views

QGIS QWC2 Cross-Site Scripting vulnerability

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.5AI score0.00401EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/10/13 10:15 a.m.4 views

CVE-2025-11183

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS0.00401EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/13 9:17 a.m.1 views

CVE-2025-11183 Cross-Site Scripting Vulnerability in QWC2

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS6.1AI score0.00401EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/13 9:17 a.m.8 views

CVE-2025-11183 Cross-Site Scripting Vulnerability in QWC2

Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...

6.9CVSS0.00401EPSS
Exploits0References1
CVE
CVE
added 2025/10/13 9:17 a.m.14 views

CVE-2025-11183

CVE-2025-11183. QGIS QWC2’s attribute table is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user input, allowing an authorized attacker to inject and execute arbitrary JavaScript in the user’s browser. Affected version: QWC2

6.9CVSS6.1AI score0.00401EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.3 views

QGIS QWC2 安全漏洞

QGIS QWC2 is a web front-end client framework from the QGIS organization. A security vulnerability exists in QGIS QWC2 versions prior to 2025.08.14, which stems from a cross-site scripting vulnerability in the attribute table that could lead to an authorized attacker planting arbitrary JavaScript...

6.9CVSS6AI score0.00401EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.3 views

PT-2025-41779

Name of the Vulnerable Software and Affected Versions QGIS QWC2 versions prior to 2025.08.14 Description A Cross-Site Scripting issue exists in the attribute table functionality. This allows an authorized attacker to inject arbitrary JavaScript code into the page. Recommendations Update QGIS QWC2...

6.9CVSS6.1AI score0.00401EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2025/05/14 12:44 a.m.3 views

kernel: x86/mm/pat: fix VM_PAT handling in COW mappings

CVE-2024-35877 pertains to a flaw in the Linux kernel's handling of Page Attribute Table PAT settings during Copy-On-Write COW operations. When a write operation triggers a COW event, the kernel may replace the original page table entries PTEs with anonymous folios. This replacement disrupts the...

5.5CVSS7.3AI score0.00252EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.3 views

The vulnerabilities of x86/mm/pat components in the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerability of the x86/mm/pat components of the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.4AI score0.00252EPSS
Exploits0References48Affected Software7
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.2 views

kernel: x86/mm/pat: fix VM_PAT handling in COW mappings

CVE-2024-35877 pertains to a flaw in the Linux kernel's handling of Page Attribute Table PAT settings during Copy-On-Write COW operations. When a write operation triggers a COW event, the kernel may replace the original page table entries PTEs with anonymous folios. This replacement disrupts the...

5.5CVSS7.3AI score0.00252EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/09/24 2:39 a.m.2 views

kernel: x86/mm/pat: fix VM_PAT handling in COW mappings

CVE-2024-35877 pertains to a flaw in the Linux kernel's handling of Page Attribute Table PAT settings during Copy-On-Write COW operations. When a write operation triggers a COW event, the kernel may replace the original page table entries PTEs with anonymous folios. This replacement disrupts the...

5.5CVSS7.3AI score0.00252EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/09/24 12:40 a.m.1 views

kernel: x86/mm/pat: fix VM_PAT handling in COW mappings

CVE-2024-35877 pertains to a flaw in the Linux kernel's handling of Page Attribute Table PAT settings during Copy-On-Write COW operations. When a write operation triggers a COW event, the kernel may replace the original page table entries PTEs with anonymous folios. This replacement disrupts the...

5.5CVSS7.3AI score0.00252EPSS
Exploits0References5
Rows per page
Query Builder