Lucene search
+L

12105 matches found

Cvelist
Cvelist
•added 2024/02/29 3:52 p.m.•52 views

CVE-2024-26617 fs/proc/task_mmu: move mmu notification mechanism inside mm lock

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: move mmu notification mechanism inside mm lock Move mmu notification mechanism inside mm lock to prevent race condition in other components which depend on it. The notifier will invalidate memory range. Depending...

7.8CVSS6.7AI score0.00165EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/02/29 3:52 p.m.•82 views

CVE-2024-26617

In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: move mmu notification mechanism inside mm lock Move mmu notification mechanism inside mm lock to prevent race condition in other components which depend on it. The notifier will invalidate memory range. Depending...

7.8CVSS5.2AI score0.00165EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/02/29 4:07 a.m.•10 views

SUSE CVE-2020-36776

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/cpufreqcooling: Fix slab OOB issue Slab OOB issue is scanned by KASAN in cpupowertofreq. If power is limited below the power of OPP0 in EM table, it will cause slab out-of-bound issue with negative array index...

5.5CVSS7.7AI score0.00232EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•6 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a sequence that may be called if vsyscall is interrupted for performance sampling NMI...

5.5CVSS6.5AI score0.00228EPSS
SaveExploits0References6
CVE
CVE
•added 2024/02/28 4:16 p.m.•144 views

CVE-2024-24701

CVE-2024-24701 is a CSRF vulnerability in Setka Editor (WordPress plugin: setka-editor)

8.8CVSS6.3AI score0.00277EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/28 4:16 p.m.•23 views

CVE-2024-24701 WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

4.3CVSS7AI score0.00277EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/02/28 3:15 p.m.•11 views

DEBIAN-CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS6AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/28 3:15 p.m.•28 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS6AI score0.002EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/02/28 3:15 p.m.•18 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS6.8AI score0.002EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2024/02/28 3:15 p.m.•19 views

UBUNTU-CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS5.8AI score0.002EPSS
SaveExploits0References4
Prion
Prion
•added 2024/02/28 3:15 p.m.•29 views

Privilege escalation

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

2.9CVSS6AI score0.002EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/02/28 3:15 p.m.•53 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6.7CVSS6.4AI score0.002EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/02/28 2:39 p.m.•46 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

6CVSS7.1AI score0.002EPSS
SaveExploits0References3
Mend
Mend
•added 2024/02/28 2:38 p.m.•8 views

CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

8.3CVSS0.002EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/02/28 12:48 p.m.•17 views

kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation...

7.8CVSS6.8AI score0.00715EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2024/02/28 12:36 p.m.•67 views

kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation...

7.8CVSS6.8AI score0.00715EPSS
SaveExploits2References5
NVD
NVD
•added 2024/02/28 9:15 a.m.•22 views

CVE-2021-46993

In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets based on their clamp values for performance reasons. However, the size of buckets is currently computed using a rounding division, which can le...

7.8CVSS7.7AI score0.00243EPSS
SaveExploits0References5
CVE
CVE
•added 2024/02/28 8:13 a.m.•141 views

CVE-2021-46993

CVE-2021-46993 — Linux kernel sched: out-of-bounds access in uclamp bucket calculation. Util-clamp places tasks into buckets based on clamp values; with, e.g., 20 buckets, bucket size computed as 1024/20=51 can map a clamp of 1024 to bucket id 20, while valid indexes are 0–19, causing OOB access....

7.8CVSS6.5AI score0.00243EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/02/28 8:13 a.m.•33 views

CVE-2021-46993 sched: Fix out-of-bound access in uclamp

In the Linux kernel, the following vulnerability has been resolved: sched: Fix out-of-bound access in uclamp Util-clamp places tasks in different buckets based on their clamp values for performance reasons. However, the size of buckets is currently computed using a rounding division, which can le...

7.8CVSS8.6AI score0.00243EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2024/02/28 3:40 a.m.•8 views

SUSE CVE-2024-26602

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sysmembarrier On some systems, sysmembarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to preve...

4.7CVSS6.2AI score0.00318EPSS
SaveExploits0References19
Rows per page
Query Builder