3633 matches found
Siemens SIMATIC RTLS Locating Manager Resource Allocation Error Vulnerability
SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A resource allocation error vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to the affected application faili...
CVE-2024-33495
A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...
CVE-2024-34257
creationtimestamp| type| source ---|---|--- 2024-05-08 19:49:47+00:00| seen| https://t.me/arvinclub1/1106 2024-05-12 15:24:25+00:00| seen| Telegram/JOaFkPNkwLfjNX0z8OGxDVp4kHME6sGW7nkxX49akSUzp7M 2024-05-12 15:24:25+00:00| seen| https://t.me/LockBitRaasRansomware/27259 2024-12-27 00:00:00+00:00|...
SUSE CVE-2024-26990
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status Check kvmmmupageadneedwriteprotect when deciding whether to write-protect or clear D-bits on TDP MMU SPTEs, so that the TDP MMU accounts for any...
CVE-2024-3585
The Send PDF for Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of form submissions due to a missing capability check on the hooks function in all versions up to, and including, 1.0.2.3. This makes it possible for unauthenticated attackers to download information about...
CVE-2024-3677
CVE-2024-3677 refers to The Ultimate 410 Gone Status Code plugin for WordPress, vulnerable to Stored XSS via the 410 entries in all versions up to 1.1.4. The issue requires authentication at contributor+ level and can cause arbitrary script execution on pages loaded by users. The vulnerability ha...
kernel: io_uring/net: don't overflow multishot recv
A flaw was found in the Linux kernel's iouring subsystem. When using multishot receive operations, completion queue entries CQEs can overflow without proper limits. This can lead to excessive memory consumption, performance degradation, and in worst cases, an out-of-memory OOM condition for the...
SUSE CVE-2022-48631
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode extents, the ext4extbinsearchidx function assumes that the extent header has been previously validated. However, there are no checks...
DEBIAN-CVE-2022-48631
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode extents, the ext4extbinsearchidx function assumes that the extent header has been previously validated. However, there are no checks...
UBUNTU-CVE-2022-48631
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when ehentries == 0 and ehdepth 0 When walking through an inode extents, the ext4extbinsearchidx function assumes that the extent header has been previously validated. However, there are no checks...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that there is no check to verify that the number of entries eh-ehentries is non-zero when depth 0...
PT-2024-11767 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc8+ Description: A bug in the Linux kernel's ext4 file system has been resolved. The issue occurred when parsing extents and the number of entries eh-eh entries was zero, but the depth eh depth was great...
CVE-2024-32883
MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV tag-length-value structure to represent the meta data associated with an image. The TLVs themselves are divided into two sections, a protected and an unprotected section. The protected TLV entries are included as part...
CVE-2024-32883 MCUboot Injection attack of unprotected TLV values
MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV tag-length-value structure to represent the meta data associated with an image. The TLVs themselves are divided into two sections, a protected and an unprotected section. The protected TLV entries are included as part...
GHSA-M9W6-WP3H-VQ8G CoreDNS may return invalid cache entries
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
AZL-40222 CVE-2024-0874 affecting package coredns for versions less than 1.11.1-8
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-0874
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-0874
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-0874 Coredns: cd bit response is cached and served later
A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly implemented caching...
CVE-2024-0874
CVE-2024-0874 affects CoreDNS. Root cause: improper CD bit handling leads to cache entries being incorrectly stored, causing invalid cache entries to be served. Impact: potential cache-related misbehavior; CVSS shows MEDIUM with network access. Remediation: upgrade CoreDNS to a patched version (e...