7143 matches found
CVE-2024-36361
Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the compileClient, compileFileClient, or compileClientWithDependenciesTracked function. NOTE: these functions are for compiling Pug templates into JavaScript, and there would...
kernel: i40e: Do not allow untrusted VF to remove administratively set MAC
A flaw was found in Intel network adapters in the Linux kernel, where untrusted virtualized network interfaces can remove MAC addresses set by the system. This flaw allows an attacker with sufficient privileges to cause a denial of service...
The vulnerability of the Polarion ALM application lifecycle management software, related to access control deficiencies, allows a malicious individual to gain unauthorized access to functions that are otherwise restricted.
The vulnerability of the Polarion ALM application lifecycle management software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to functions that are otherwise restricted...
PT-2024-40783 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object, gs memory chunk unwrap, and gs j...
CVE-2024-34240
QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting XSS resulting in arbitrary code execution in admin functions related to adding or updating records...
CVE-2024-34240
QDOCS Smart School 7.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in admin functions related to adding or updating records, which is described as enabling arbitrary code execution. The issue is consistently reported across multiple sources (Red Hat, NVD/CNNVD/CVE record, CVE enri...
CVE-2024-34240
QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting XSS resulting in arbitrary code execution in admin functions related to adding or updating records...
UBUNTU-CVE-2021-47242
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lookup in subflowerrorreport Maxim reported a soft lookup in subflowerrorreport: watchdog: BUG: soft lockup - CPU0 stuck for 22s! swapper/0:0 RIP: 0010:nativequeuedspinlockslowpath RSP: 0018:ffffa859c0003bc0 EFLAG...
ROS-20240521-08
A vulnerability in the API interface of the Grafana web-based data representation tool is related to insecure privilege management. privilege management. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to restricted functions A vulnerability in...
PT-2024-25761
Name of the Vulnerable Software and Affected Versions QDOCS Smart School version 7.0.0 Description The issue is related to Cross Site Scripting XSS, which results in arbitrary code execution in admin functions, specifically when adding or updating records. This could potentially allow an attacker...
CVE-2024-35929
This is a vulnerability in the Linux kernel's RCU Read-Copy Update subsystem, specifically affecting configurations that enable lazy RCU operations CONFIGRCUNOCBCPUDEFAULTALL and CONFIGRCULAZY. Under certain conditions, operations like writing to /proc/sys/vm/dropcaches could trigger warnings due...
EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2024-1696)
According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to...
The vulnerability of the FortiSandbox threat detection and mitigation system, related to the implementation of security functions at the client side, allows a perpetrator to modify the device’s configuration.
The vulnerability of the FortiSandbox threat detection and mitigation system is related to the implementation of security functions at the client side. Exploiting this vulnerability could allow a malicious actor to modify the device’s configuration...
The vulnerability of UEFI (BIOS) in Huawei personal computers allows a hacker to gain unauthorized access to arbitrary functions.
The vulnerability of UEFI BIOS in Huawei’s personal computers is related to improper access control. Exploiting this vulnerability can allow a hacker to gain unauthorized access to arbitrary functions...
The vulnerabilities of the functions dm_mq_init_request_queue() and dm_mq_cleanup_mapped_device() in the Linux kernel’s drivers/md/dm-rq.c file allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions dmmqinitrequestqueue and dmmqcleanupmappeddevice in the Linux kernel’s drivers/md/dm-rq.c file are related to the repeated release of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
BIT-GOLANG-2024-24788 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Rocky Linux 9 : postgresql (RLSA-2024:0951)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0951 advisory. - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer...
SUSE SLES12 Security Update : go1.22 (SUSE-SU-2024:1573-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1573-1 advisory. Update to go1.22.3: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin bsc1224017 - CVE-2024-24788: net: hig...