Lucene search
+L

2306 matches found

RedHat Linux
RedHat Linux
•added 2024/05/23 1:39 p.m.•12 views

glibc: null pointer dereferences after failed netgroup cache insertion

A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit...

5.9CVSS6.7AI score0.01216EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/05/23 7:32 a.m.•15 views

glibc: null pointer dereferences after failed netgroup cache insertion

A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit...

5.9CVSS6.7AI score0.01216EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/05/23 6:33 a.m.•10 views

glibc: null pointer dereferences after failed netgroup cache insertion

A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit...

5.9CVSS6.7AI score0.01216EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/05/23 3:05 a.m.•10 views

SUSE CVE-2021-47247

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler Function mlx5erepneighupdate wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry...

7.8CVSS7.3AI score0.00229EPSS
SaveExploits0References7
OSV
OSV
•added 2024/05/21 3:15 p.m.•27 views

CVE-2021-47247

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler Function mlx5erepneighupdate wasn't updated to accommodate rtnl lock removal from TC filter update path and properly handle concurrent encap entry...

7.8CVSS6.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/05/21 2:20 p.m.•72 views

CVE-2021-47275 bcache: avoid oversized read request in cache missing code path

In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In the cache missing code path of cached device, if a proper location from the internal B+ tree is matched for a cache miss range, function cacheddevcachemiss will b...

6.2AI score0.00196EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•4 views

CVE-2024-34812: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through = 2.1.8...

5.3CVSS5.8AI score0.00585EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•6 views

CVE-2024-34556: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through =...

5.3CVSS5.8AI score0.00585EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•6 views

CVE-2024-34550: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in AlexaCRM Dynamics 365 Integration.This issue affects Dynamics 365 Integration: from n/a through 1.3.17...

5.3CVSS5.8AI score0.0058EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/05/09 3:02 p.m.•16 views

glibc: null pointer dereferences after failed netgroup cache insertion

A flaw was found in the glibc netgroup cache. After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header. This can lead to a null pointer dereference that causes a crash or exit...

5.9CVSS6.7AI score0.01216EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/05/06 7:22 p.m.•50 views

CVE-2024-33600

nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd. This...

5.9CVSS6.8AI score0.01216EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/05/06 12:00 a.m.•17 views

The vulnerability of the microprogramming software of Mitel series 6800, 6900, 6900w, and 6970 lies in the fact that it allows for the insertion or modification of arguments, enabling an intruder to gain unauthorized access to protected information, alter the phone’s configuration, or execute arbitrary commands.

The vulnerability of the microprogramming software of Mitel series 6800, 6900, 6900w, and 6970 is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, modify the phone’s configuration,...

7.2CVSS5.8AI score0.00441EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/05/02 11:15 a.m.•31 views

CVE-2024-33922

Insertion of Sensitive Information into Log File vulnerability in Jordy Meow WP Media Cleaner.This issue affects WP Media Cleaner: from n/a through 6.7.2...

5.3CVSS5.8AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/02 11:02 a.m.•219 views

CVE-2024-33922

CVE-2024-33922 affects WP Media Cleaner (Jordy Meow) up to version 6.7.2, enabling unauthenticated Insertion/Inclusion of Sensitive Information into log files. Connected sources indicate a patch is available and the issue is mitigated by updating to a fixed version.

5.3CVSS5.2AI score0.00443EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•5 views

CVE-2024-33637: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Solid Plugins Solid Affiliate.This issue affects Solid Affiliate: from n/a through 1.9.1...

7.5CVSS5.8AI score0.00551EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/04/28 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from temporary data corruption within the scope of insertion...

3.3CVSS6.7AI score0.00193EPSS
SaveExploits0References4
NVD
NVD
•added 2024/04/24 8:15 a.m.•28 views

CVE-2024-32953

Insertion of Sensitive Information into Log File vulnerability in Newsletters.This issue affects Newsletters: from n/a through 4.9.5...

7.5CVSS7.5AI score0.0068EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/24 7:36 a.m.•102 views

CVE-2024-32953

CVE-2024-32953 affects the Newsletters WordPress plugin (Newsletters Lite) up to version 4.9.5. The issue is described as an insertion of sensitive information into log files, leading to potential information exposure via logs. The connected documents confirm the affected software and the log-bas...

7.5CVSS5.2AI score0.0068EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•16 views

glibc 安全漏洞

glibc GNU C Library is the C standard library implemented by the GNU Project. A security vulnerability exists in glibc, which stems from an attempt by addgetnetgrentX to send a non-existent response after a cache insertion failure, which may result in a null pointer dereference that could cause t...

5.9CVSS7.2AI score0.01216EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/24 12:00 a.m.•7 views

CVE-2024-32782: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through = 2.4.7...

6.5CVSS5.8AI score0.00871EPSS
SaveExploits0References2
Rows per page
Query Builder