Lucene search
+L

301 matches found

attackerkb
attackerkb
•added 2025/02/19 6:15 p.m.•22 views

CVE-2024-45777

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the...

6.7CVSS6.9AI score0.00244EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/18 7:52 p.m.•15 views

CVE-2024-45777

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the...

6.7CVSS6.6AI score0.00244EPSS
SaveExploits0References3
OSV
OSV
•added 2025/02/18 6:00 p.m.•21 views

UBUNTU-CVE-2024-45777

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grubgettextgetstrfromposition may overflow, leading to a Out-of-bound write. This issue can be leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the...

6.7CVSS5.9AI score0.00244EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•12 views

PT-2025-7419

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub gettext getstr from position may overflow, leading to an out-of-bound write. This...

6.8CVSS6.6AI score0.00244EPSS
SaveExploits0References142
RedhatCVE
RedhatCVE
•added 2025/02/16 6:21 a.m.•22 views

CVE-2024-13692

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.4.5 via several functions due to missing validation on a user...

5.4CVSS9.2AI score0.00311EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:46 p.m.•22 views

CVE-2017-16297

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00853EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:46 p.m.•27 views

CVE-2017-16327

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00853EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:44 p.m.•18 views

CVE-2017-16283

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00673EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:43 p.m.•26 views

CVE-2017-16278

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker...

9.9CVSS7.7AI score0.00673EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/10/21 3:46 p.m.•15 views

SUSE CVE-2024-47726

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait all existing dio write IOs before block removal, otherwise, previous direct write IO may overwrite data in the block which may be reused by other inode...

5.5CVSS7.7AI score0.00652EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/21 1:15 p.m.•8 views

DEBIAN-CVE-2024-47726

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait all existing dio write IOs before block removal, otherwise, previous direct write IO may overwrite data in the block which may be reused by other inode...

6.5CVSS5.8AI score0.00652EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/21 1:15 p.m.•19 views

UBUNTU-CVE-2024-47726

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait all existing dio write IOs before block removal, otherwise, previous direct write IO may overwrite data in the block which may be reused by other inode...

7.8CVSS6.4AI score0.00652EPSS
SaveExploits0References33
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•1 views

CVE-2024-47726: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait all existing dio write IOs before block removal, otherwise, previous direct write IO may overwrite data in the block which may be reused by other inode...

7.8CVSS6.2AI score0.00652EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/06/27 12:00 a.m.•2 views

PT-2024-32774

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been fixed, specifically in the f2fs filesystem. The issue was related to direct IO inconsistency, where previous direct write IO may overwrite da...

7.8CVSS0.00652EPSS
SaveExploits0
NVD
NVD
•added 2024/05/17 2:15 p.m.•21 views

CVE-2024-35821

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to...

7.5CVSS7.3AI score0.00575EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
•added 2024/05/17 12:15 p.m.•36 views

CVE-2024-27410

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data i...

7.8CVSS6AI score0.00257EPSS
SaveExploits0References22
Vulnrichment
Vulnrichment
•added 2024/05/17 11:50 a.m.•32 views

CVE-2024-27410 wifi: nl80211: reject iftype change with mesh ID change

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data i...

7.8CVSS6.7AI score0.00257EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•15 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from old data overwriting new data...

7.1CVSS6.4AI score0.00232EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•2 views

CVE-2024-27410: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data i...

7.8CVSS5.8AI score0.00257EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•25 views

PT-2024-14691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when an inode is compressed but not encrypted, and the system fails to call f2fs wait on block writeback to wait for GCed page writeback in the IPU write path. This can...

7.1CVSS5.6AI score0.00232EPSS
SaveExploits0
Rows per page
Query Builder