11467 matches found
The vulnerability of the QueryVariableInfo function in the efi component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the QueryVariableInfo function in the efi component of the Linux operating system’s kernel is related to the lack of initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2024-30921 · Opor Ayam · Opor Ayam
Name of the Vulnerable Software and Affected Versions: Opor Ayam versions 1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This vulnerability allows Reflected XSS, which can be exploited by...
CVE-2024-46680
In CVE-2024-46680, the Linux kernel Bluetooth btnxpuart driver can crash when the driver is removed because ps_wakeup() schedules work after module removal. The fix introduces ps_cleanup() to deassert UART break immediately on serdev close, cancel any scheduled work, and destroy the ps_lock mutex...
The vulnerability of the QEMU hardware emulation software’s “info” command, related to uncontrolled resource consumption, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the QEMU hardware emulation software’s “info” command is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to access confidential data, compromise its integrity, and even cause service failures through the use of a specially...
PT-2024-40571 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: chunk free object, file close file, and sclose. No...
PT-2024-31157 · Vernemq · Vernemq
Name of the Vulnerable Software and Affected Versions: vernemq version 2.0.1 Description: A memory allocation issue allows attackers to cause a Denial of Service DoS via excessive memory consumption. Recommendations: For vernemq version 2.0.1, at the moment, there is no information about a newer...
CVE-2024-45030
In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...
AZL-49236 CVE-2024-45030 affecting package kernel for versions less than 6.6.51.1-1
In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...
CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS
In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...
CVE-2024-43458 Windows Networking Information Disclosure Vulnerability
...
PT-2024-6269 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kerberos component, which is associated with weaknesses in the authentication procedure. This vulnerability ca...
PT-2024-39133 · Qemu +2 · Qemu +2
Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue push as set in virtio scsi complete req, virtio blk req complete, and virtio crypto...
PT-2024-30278 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: A potential issue has been identified, with a reference to an external link for more information. No details are provided about the nature of th...
PT-2024-37433 · Axis · Axis Os
Name of the Vulnerable Software and Affected Versions: AXIS OS affected versions not specified Description: A Guard Tour VAPIX API parameter in Axis devices allows the use of arbitrary values, enabling an attacker to block access to the guard tour configuration page in the web interface. Axis has...
PT-2024-6374 · D Link · D-Link Di-8300
Name of the Vulnerable Software and Affected Versions: D-Link DI-8300 version 16.07.26A1 Description: The issue is related to the msp info htm function in the D-Link DI-8300 router's firmware, which is vulnerable to command injection. This vulnerability can be exploited by a remote attacker to...
CVE-2024-44402
D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm...
libtiff: NULL pointer dereference in tif_dirinfo.c
A null pointer dereference flaw was found in Libtiff via tifdirinfo.c. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash,...
WAYOS FBM-291W 安全漏洞
WAYOS FBM-291W is a wireless router from WAYOS. A security vulnerability exists in WAYOS FBM-291W version v19.09.11. An attacker can exploit the vulnerability to execute commands via mspinfohtm...
EulerOS Virtualization 2.12.1 : tpm2-tss (EulerOS-SA-2024-2319)
According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...
