205 matches found
CVE-2023-2181
Removed by vendor...
CVE-2023-2181
GitLab vulnerability CVE-2023-2181 affects all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. An attacker could abuse the git feature refs/replace to smuggle content into a merge request, which would not be visible during UI review. This is caused by improper handling...
Gitlab -- Vulnerability
Gitlab reports: Smuggling code changes via merge requests with refs/replace...
CVE-2023-23419
Windows Resilient File System ReFS Elevation of Privilege Vulnerability...
CVE-2023-23419
CVE-2023-23419 is a Windows Resilient File System (ReFS) elevation of privilege vulnerability. Public sources indicate it's a local vulnerability requiring low privileges with local attack vector, leading to elevated rights on affected systems. Microsoft references KB5023706 as the security updat...
CVE-2023-23418 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
CVE-2023-23418
CVE-2023-23418 is a Windows Resilient File System (ReFS) elevation of privilege vulnerability. The issue affects ReFS on Windows platforms and is described in ESC/NCSC references as enabling obtaining increased entitlements. Public context in connected sources notes this CVE among a broader set o...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
KLA48553 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...
Microsoft Windows Resilient File System (ReFS) 安全漏洞
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems,Windows 11...
SUSE CVE-2018-10877
Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4extdroprefs function when operating on a crafted ext4 filesystem image...
February 14, 2023—KB5022842 (OS Build 20348.1547)
None None...
AZL-13169 CVE-2023-0468 affecting package kernel for versions less than 5.15.92.1-1
A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Linux Kernel due to a race condition of pollrefs. This flaw may cause a NULL pointer dereference...
PT-2022-36445 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.5 through 5.4.223 Description: The issue is related to a potential security problem in the btrfs filesystem, specifically in the resolve indirect refs function during backref walking, which may cause an inode list leak...
PT-2022-6197 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the io uring subcomponent of the Linux Kernel due to a race condition in the poll refs function. This issue may cause a NULL pointer dereference,...
CVE-2022-41054
Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.
CVE-2022-41054 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
CVE-2022-42968
A flaw was found in Gitea. The self-hosted Git service does not sanitize and escape refs in the git backend. This issue could allow an attacker to craft arguments for the git commands, which will be mishandled...
CVE-2022-42968
Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled...