Lucene search
+L

22929 matches found

osv_azl
osv_azl
•added 2024/12/02 2:15 p.m.•19 views

AZL-54174 CVE-2024-53112 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

5.5CVSS7AI score0.00254EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/12/02 2:15 p.m.•9 views

DEBIAN-CVE-2024-53112

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

5.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/02 2:15 p.m.•15 views

AZL-54143 CVE-2024-53112 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

5.5CVSS7AI score0.00254EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/02 2:15 p.m.•18 views

UBUNTU-CVE-2024-53112

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

5.5CVSS6.3AI score0.00254EPSS
SaveExploits0References49
Cvelist
Cvelist
•added 2024/12/02 1:44 p.m.•42 views

CVE-2024-53121 net/mlx5: fs, lock FTE when checking if active

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, lock FTE when checking if active The referenced commits introduced a two-step process for deleting FTEs: - Lock the FTE, delete it from hardware, set the hardware deletion function to NULL and unlock the FTE. - Lock...

7.8CVSS0.00205EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2024/12/02 1:44 p.m.•53 views

CVE-2024-53112 ocfs2: uncache inode which has failed entering the group

In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

0.00254EPSS
SaveExploits0References8
The Hacker News
The Hacker News
•added 2024/12/02 11:14 a.m.•82 views

THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25 - Dec 1)

Ever wonder what happens in the digital world every time you blink? Here's something wild - hackers launch about 2,200 attacks every single day, which means someone's trying to break into a system somewhere every 39 seconds. And get this - while we're all worried about regular hackers, there are...

10CVSS7.8AI score0.91849EPSS
SaveExploits23
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•28 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an inode in the ocfs2 component not being removed from the cache when joining a group fails, resulting in a...

5.5CVSS6.6AI score0.00254EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/01 5:30 p.m.•11 views

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2024/11/29 5:15 a.m.•12 views

DEBIAN-CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS5.2AI score0.02158EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/11/29 5:15 a.m.•36 views

UBUNTU-CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS5.8AI score0.02158EPSS
SaveExploits0References5
CVE
CVE
•added 2024/11/29 12:00 a.m.•356 views

CVE-2024-48651

The ProFTPD server, through version 1.3.8b before commit cec01cc , is vulnerable to a flaw where supplemental group inheritance grants unintended access to GID 0 . This issue is caused by a lack of supplemental groups from mod_sql . This vulnerability affects various distributions, including open...

7.5CVSS7AI score0.02158EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/29 12:00 a.m.•22 views

ProFTPD 安全漏洞

ProFTPD is the ProFTPD open source suite of highly configurable, open source FTP server software. A security vulnerability exists in ProFTPD version 1.3.8b, which stems from the lack of a supplemental group from modsql, which inherits an unexpected access grant to GID 0...

7.5CVSS8.9AI score0.02158EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•6 views

CVE-2024-48651: Incorrect Authorization

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS7.2AI score0.02158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/29 12:00 a.m.•307 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

0.02158EPSS
SaveExploits0References2
Mend
Mend
•added 2024/11/29 12:00 a.m.•4 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

8.7CVSS0.02158EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/11/29 12:00 a.m.•15 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

6.9AI score0.02158EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/29 12:00 a.m.•23 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS6.6AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2024/11/29 12:00 a.m.•36 views

CVE-2024-48651

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from modsql...

7.5CVSS7.3AI score0.02158EPSS
SaveExploits0
CVE
CVE
•added 2024/11/28 3:41 p.m.•69 views

CVE-2024-11969

The NetCloud Exchange client for Windows v1.110.50 has an insecure file/folder permissions issue that grants full control to the Everyone group, enabling a local non-admin user to escalate privileges, potentially execute arbitrary code, and maintain persistence. No explicit remediation version is...

8.8CVSS8.9AI score0.00163EPSS
SaveExploits0References1
Rows per page
Query Builder