Lucene search
+L

8752 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/24 12:00 a.m.•8 views

CVE-2024-34988: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" askforaquotemodul = 1.0.51 from Buy Addons for PrestaShop allows attackers to view sensitive information and cause other impacts via methods AskforaquotemodulcustomernewquoteModuleFrontController::ru...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/24 12:00 a.m.•30 views

PT-2024-26277 · Unknown · Create A Quote In Frontend + Backend Pro

Name of the Vulnerable Software and Affected Versions: Complete for Create a Quote in Frontend + Backend Pro module versions = 1.0.51 Description: The issue allows attackers to view sensitive information and cause other impacts. This is achieved via methods such as...

9.8CVSS6.7AI score0.00408EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/06/22 4:09 a.m.•12 views

SUSE CVE-2022-48733

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:createsnapshot, we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call...

6.7CVSS6.5AI score0.0023EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2024/06/22 4:08 a.m.•7 views

SUSE CVE-2022-48767

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by tryprepasynccreate is currently leaked. Ensure we put it...

5.5CVSS7.7AI score0.00217EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2024/06/22 3:35 a.m.•12 views

SUSE CVE-2024-38564

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE bpfprogattach uses attachtypetoprogtype to enforce proper attach type for BPFPROGTYPECGROUPSKB. linkcreate uses bpfprogget and relies on...

6CVSS6.5AI score0.00239EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2024/06/21 12:00 a.m.•18 views

PT-2024-6878 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon version 24.04.2 Description: A SQL injection vulnerability allows a remote high-privileged attacker to execute arbitrary SQL commands via create user form inputs. This issue is related to the lack of protection of the SQL query...

6.7CVSS9.1AI score0.02137EPSS
SaveExploits0References13
osv_debian
osv_debian
•added 2024/06/20 12:15 p.m.•7 views

DEBIAN-CVE-2022-48767

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by tryprepasynccreate is currently leaked. Ensure we put it...

5.5CVSS5.4AI score0.00217EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/06/20 12:15 p.m.•12 views

DEBIAN-CVE-2022-48733

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:createsnapshot, we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call...

7.8CVSS5.8AI score0.0023EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/06/20 12:15 p.m.•21 views

UBUNTU-CVE-2022-48767

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by tryprepasynccreate is currently leaked. Ensure we put it...

5.5CVSS5.7AI score0.00217EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2024/06/20 12:15 p.m.•30 views

UBUNTU-CVE-2022-48725

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siwcreateqp The atomicinc needs to be paired with an atomicdec on the error path...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References6
CVE
CVE
•added 2024/06/20 11:13 a.m.•114 views

CVE-2022-48767

CVE-2022-48767 affects the Linux kernel and relates to a leak of the ceph_string reference after an async create attempt. The description in the initial document states that the reference acquired by try_prep_async_create is leaked and must be put back, and connected sources (Astra Linux bulletin...

5.5CVSS6.9AI score0.00217EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2024/06/20 11:13 a.m.•19 views

CVE-2022-48767

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by tryprepasynccreate is currently leaked. Ensure we put it...

5.5CVSS5.4AI score0.00217EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/06/20 12:00 a.m.•25 views

CVE-2022-48767

In the Linux kernel, the following vulnerability has been resolved: ceph: properly put cephstring reference after async create attempt The reference acquired by tryprepasynccreate is currently leaked. Ensure we put it...

5.5CVSS6.2AI score0.00217EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/06/20 12:00 a.m.•22 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates from a reference count leak in the RDMA/siw module siwcreateqp...

5.5CVSS6.5AI score0.00225EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/06/20 12:00 a.m.•3 views

PT-2024-9250

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ceph component in the Linux kernel, where a memory leak occurs after the effective lifetime of the memory. This can lead to a denial of service. The...

5.5CVSS0.00217EPSS
SaveExploits0
osv_debian
osv_debian
•added 2024/06/19 3:15 p.m.•14 views

DEBIAN-CVE-2021-47579

In the Linux kernel, the following vulnerability has been resolved: ovl: fix warning in ovlcreatereal Syzbot triggered the following warning in ovlworkdircreate - ovlcreatereal: if !err && WARNON!newdentry-dinode The reason is that the cgroup2 filesystem returns from mkdir without instantiating t...

5.5CVSS5.4AI score0.00235EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/06/19 2:15 p.m.•9 views

DEBIAN-CVE-2024-38564

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE bpfprogattach uses attachtypetoprogtype to enforce proper attach type for BPFPROGTYPECGROUPSKB. linkcreate uses bpfprogget and relies on...

5.5CVSS5.5AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/19 12:00 a.m.•9 views

PT-2024-35738

Name of the Vulnerable Software and Affected Versions Rbs Image Gallery plugin for WordPress versions up to, and including, 3.2.19 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the rbs ajax create article and rbs ajax reset views...

8.8CVSS5.7AI score0.00287EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2024/06/19 12:00 a.m.•18 views

Android PackageInstallerService createSessionInternal Database Access

The vulnerability of the createSessionInternal function in the PackageInstallerService.java module of the Android operating system is related to the lack of encapsulation around special characters in the name of the installer when it is written to /data/system/packages.list. Exploiting this...

8.4CVSS5.6AI score0.0146EPSS
SaveExploits17References3Affected Software1
Veracode
Veracode
•added 2024/06/18 8:26 a.m.•26 views

Improper Authorization

Evmos is vulnerable to Improper Authorization. The vulnerability is due to allowing a user to create a validator using vested tokens to deposit the self-bond...

6.5CVSS6.6AI score0.00313EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder