260 matches found
Linux kernel Block Component DoS
The vulnerability of the block component in the Linux operating system’s kernel is related to errors in resource management in the blkdeviomapbegin function. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-16861
Name of the Vulnerable Software and Affected Versions erzhongxmu Jeewms up to 20241108 Description A critical issue affects the processing of the file cgReportController.do of the component AuthInterceptor. The manipulation of the argument begin date leads to sql injection. The attack may be...
JeeWMS injection vulnerability
JeeWMS is JeeWMS open source a JAVA-based warehouse management system . JeeWMS 20241108 and earlier versions have an injection vulnerability that stems from the parameter begindate in the file cgReportController.do can lead to SQL injection...
kernel: block: refine the EOF check in blkdev_iomap_begin
In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...
Linux write_seqcount_begin write_seqcount_end Buffer Overflow DoS
The vulnerability of the v3djobstartstats function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
SUSE CVE-2024-44945
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missing extack initialisation when ACKing BATCHBEGIN and BATCHEND...
DEBIAN-CVE-2024-44945
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missing extack initialisation when ACKing BATCHBEGIN and BATCHEND...
UBUNTU-CVE-2024-44945
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink: Initialise extack before use in ACKs Add missing extack initialisation when ACKing BATCHBEGIN and BATCHEND...
MAL-2024-7614 Malicious code in sap-begin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70b7d7d3eaf8577047d02fdc20282baf63ce35db280b2779c49737c6458114d9 The OpenSSF Package Analysis project identified 'sap-begin' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-begin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70b7d7d3eaf8577047d02fdc20282baf63ce35db280b2779c49737c6458114d9 The OpenSSF Package Analysis project identified 'sap-begin' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2024-29215
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue is related to the nilfs2 file system in the Linux kernel. It involves a bug in the rename operation of a broken directory, where the block write begin int function may fail due to a B...
PT-2024-40801
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ crash. The crash state includes functions such as sputs, xps write profile, and xps begin typed image. N...
DEBIAN-CVE-2024-38604
In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdeviomapbegin blkdeviomapbegin rounds down the offset to the logical block size before stashing it in iomap-offset and checking that it still is inside the inode size. Check the isize check to th...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a security issue in block blkdeviomapbegin...
PT-2024-9805
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The issue is related to errors in resource management within the blkdev iomap begin function of the Linux kernel's block component. This could allow an attacker to cause a denial of service...
PT-2024-28093
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue arises when the multi-devices feature is enabled in the Linux kernel, specifically with the f2fs file system. In this scenario, the f2fs map blocks function may return a zero block...
kernel: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perfoutputbegin parameter is incorrectly invoked in perfeventbpfoutput syzkaller reportes a KASAN issue with stack-out-of-bounds. The call trace is as follows: dumpstack+0x9c/0xd3...
haproxy: data leak via fcgi requests
A flaw was found in HAProxy, which could allow a remote attacker to obtain sensitive information caused by improper initialization when encoding the FCGIBEGINREQUEST record. By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information and us...
PT-2025-49496
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the JFS filesystem within the Linux kernel. Specifically, a missing check for a read-only mounted filesystem in the txBegin function could lead to a NULL pointer...
DEBIAN-CVE-2023-0836
An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGIBEGINREQUEST record. Sensitive data may be disclos...