253 matches found
CVE-2024-36467
CVE-2024-36467 (Zabbix) : An authenticated user with API access can elevate their own privileges by adding themselves to groups (e.g., Zabbix administrators) via user.update, bypassing group authorization for non-disabled GUI groups. Technical roots described in the connected sources show that us...
CVE-2024-9409
CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network...
PT-2024-9992 · Schneider Electric · Powerlogic
Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic versions PM5320, PM5340, and PM5341 Description: An Uncontrolled Resource Consumption issue exists, potentially causing devices to become unresponsive and resulting in communication loss when a large amount of IG...
SUSE CVE-2022-48910
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6mcdown at most once There are two reasons for addrconfnotify to be called with NETDEVDOWN: either the network device is actually going down, or IPv6 was disabled on the interface. If either of them...
PT-2024-19343 · Himer · Himer
Name of the Vulnerable Software and Affected Versions: Himer WordPress theme versions prior to 2.1.1 Description: The issue concerns the lack of CSRF checks in certain areas, allowing attackers to perform unwanted actions on logged-in users through CSRF attacks. This includes actions such as...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
Improper Preservation Of Permissions
github.com/authelia/authelia/ is vulnerable to Improper Preservation Of Permissions. The vulnerability is due to a flaw in the implementation of user group management. This can lead to unexpected outcomes like the changes to a user group are not taken into account by access control for longer tha...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
kernel: use-after-free in IPv4 IGMP
A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...
USN-6601-1 linux vulnerability
It was discovered that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...
DEBIAN-CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
Design/Logic Flaw
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
PT-2024-19540 · Kanboard +1 · Kanboard +1
Name of the Vulnerable Software and Affected Versions: Kanboard version 1.2.34 Description: The issue concerns Html Injection in the group management feature. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
