9266 matches found
kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...
Moderate: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
The vulnerability of the SAP Business Objects Business Intelligence Platform lies in the lack of measures taken to protect its web page structure, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
编号撤回
Google Chrome is a web browser developed by Google, known for being fast, secure and personalized, with support for multi-device synchronization and smart tool integration. Google Chrome suffers from a post-release reuse vulnerability that stems from the mishandling of memory objects by the V8...
The vulnerability in the web-based administration tool for SAP BusinessObjects BI Platform Central Management Console relates to the manipulation of queries on the server side, allowing an attacker to disclose sensitive information.
The vulnerability in the web-based administration tool for SAP BusinessObjects BI Platform Central Management Console is related to the manipulation of queries on the server side. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2025-38674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Revert drm/prime: Use dmabuf from GEM object instance This reverts commit f83a9b8c7fd0557b0c50784bfdc1bbe9140c9bf8. The dmabuf field in struct drmgemobject is n...
CVE-2025-3586: Incorrect Authorization
In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 27 through update 42 Liferay PaaS, and Liferay Self-Hosted, the Objects module does not restrict the use of Groovy scripts in Object...
Linux Distros Unpatched Vulnerability : CVE-2019-10912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, it is possible to cache objects that may contain bad user input. On...
Security Bulletin: IBM Data Product Hub is affected by several vulnerabilities
Summary IBM Data Product Hub has dependencies on IBM Semeru, IBM WebSphere Application Server Liberty, Requests Python HTTP library, and Node.js Dompurify, Brace-expansion, Xmldom, Undici, and Form-data runtime modules, which are vulnerable. This bulletin contains information regarding the...
The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient validation of queries on the server side, allows a attacker to execute an SSRF attack.
The vulnerability of the SAP Business Objects Business Intelligence Platform relates to insufficient validation of queries at the server side. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
MAL-2025-41459 Malicious code in @twork-data-services/accounts-grpc-internal-hidden-ui-objects (npm)
--- -= Per source details. Do not edit below this line.=-...
Kubernetes 安全漏洞
Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes that stems from mishandling of the NodeRestriction access controller, which could lead to nod...
Linux Distros Unpatched Vulnerability : CVE-2018-20725
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability exists in graphtemplates.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in the Graph Vertic...
Linux Distros Unpatched Vulnerability : CVE-2018-19871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption. CVE-2018-19871 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2022-43594
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted...
Linux Distros Unpatched Vulnerability : CVE-2018-11743
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The initcopy function in kernel.c in mruby 1.4.1 makes initializecopy calls for TTICLASS objects, which allows attackers to cause a denial of service mrbhashkey...
Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Summary Using idlelib.pyshell.ModifiedInterpreter.runcode function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.pyshell.ModifiedInterpreter.runcod...
CVE-2025-52461
creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:13+00:00| seen| https://infosec.place/objects/3155bb7d-cc5c-498c-bcfd-b243f7033405...
CVE-2025-38672
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-dma: Use dmabuf from GEM object instance" This reverts commit e8afa1557f4f963c9a511bd2c6074a941c308685. The dmabuf field in struct drmgemobject is not stable over the object instance's lifetime. The field becomes...