4592 matches found
CVE-2025-24737: Missing Authorization
Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through = 4.6.1...
CVE-2025-22126 md: fix mddev uaf while iterating all_mddevs list
In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of a kernel helper function when printing hex dumps by the ibmvnic driver, which could...
PT-2025-16306
Name of the Vulnerable Software and Affected Versions Deporsite from T-INNOVA affected versions not specified Description The issue allows an attacker to retrieve sensitive information from other users. This is achieved via the idUsuario parameter in the "/helper/Familia/obtenerFamiliaUsuario"...
BIT-RAILS-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format
Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...
SUSE CVE-2025-21908
In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfsreleasefolio to not deadlock via kcompactd writeback Add PFKCOMPACTD flag and currentiskcompactd helper to check for it so nfsreleasefolio can skip calling nfswbfolio from kcompactd. Otherwise NFS can deadlock waiting...
EulerOS 2.0 SP13 : git (EulerOS-SA-2025-1332)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
USN-7383-2 linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...
The vulnerability of the drm/shmem-helpper components in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drmgemshmemmmap function in the drm/shmem-helpful components of the Linux operating system is related to memory corruption. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the cm_helper_translate_curve_to_degamma_hw_format() function in the drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cmhelpertranslatecurvetodegammahwformat function in the drivers/gpu/drm/amd/display/dc/dcn10/dcn10cmcommon.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the cm3_helper_translate_curve_to_degamma_hw_format() function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c file of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cm3helpertranslatecurvetodegammahwformat function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30cmcommon.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the drm_fb_helper_alloc_info() function in the drivers/gpu/drm/drm_fb_helper.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the drmfbhelperallocinfo function in the drivers/gpu/drm/drmfbhelper.c module of the Linux kernel is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause service failures...
EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1296)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...
Error: "Cannot find the object on the mount host."
Challenge When attempting to perform a Guest Files restore from Veeam Backup Enterprise Manager, the restore fails with the error: Cannot find the object on the mount host. Read KB4722 for more details. Cause This error occurs when the Guest OS partition that is being mounted is formatted with a...
RLSA-2024:9114 Moderate: gnome-shell and gnome-shell-extensions security update
GNOME Shell acts as a compositing manager for the desktop, and displays both application windows and other objects. It provides core interface functions like switching windows, launching applications, and notifications. It takes advantage of the capabilities of modern graphics hardware and...
SUSE CVE-2025-2312
A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...
CVE-2024-13436
The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'appserohelper' page. This makes it possible for unauthenticated attackers to update settings and inject...
Malicious code in env-check-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2256 Malicious code in env-check-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04728a28db58b9a9e546a8840e5cca54ab1f7dcf20fbb0817639e0c738a3bc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dt-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f84c1cc320f830bd5436c3d7b8ccef2d0d6a0e8edcfd05e472854ed042a5b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...