Oracle JD Edwards Products 跨站请求伪造漏洞

Oracle JD Edwards Products is a fully integrated suite of enterprise resource planning ERP applications from Oracle Corporation. The products provide application modules for financial management, project management, and asset lifecycle management.JD Edwards EnterpriseOne Tools is one of the...

Oracle MySQL 缓冲区错误漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit the vulnerability to update, insert, or delete access to some...

Oracle MySQL 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL version 9.1.0 and prior versions. An attacker can use this vulnerability to create, delete, or modify...

SUSE CVE-2024-57928

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

The vulnerability of the Digital Media component of Windows operating systems allows attackers to elevate their privileges to a system-level level.

The vulnerability of the Digital Media component of Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

DEBIAN-CVE-2024-57928

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

CVE-2024-57928

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

UBUNTU-CVE-2024-57928

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

CVE-2024-57928

CVE-2024-57928 (Linux kernel) : The vulnerability is in netfs buffered reads. When netfs_read_to_pagecache() encounters an error from either ->prepare_read() or netfs_prepare_read_iterator(), it must decrement ->nr_outstanding, cancel the subrequest, and break the issuing loop. The patch fi...

CVE-2024-57928 netfs: Fix enomem handling in buffered reads

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

CVE-2024-57928 netfs: Fix enomem handling in buffered reads

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If netfsreadtopagecache gets an error from either -prepareread or from netfspreparereaditerator, it needs to decrement -nroutstanding, cancel the subrequest and break out of the issuin...

PT-2025-3653 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a memory handling bug in the Linux kernel's buffered reads, specifically in the netfs read to pagecache function. When this function encounters an error from either...

PT-2025-3422 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OtCMS versions =7.46 Description: The issue allows for Server-Side Request Forgery SSRF in the "/admin/read.php" API endpoint, enabling arbitrary system file reads. Recommendations: For OtCMS versions =7.46, as a temporary workaround, conside...

WAVLINK AC3000 nas.cgi add_dir function path traversal vulnerability in disk_part parameter

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A path traversal vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the diskpart parameter of the nas.cgi adddir function that fails to correctly filter for special elements in the resource or file...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with unaligned atomic reads...

WAVLINK AC3000 路径遍历漏洞

WAVLINK AC3000 is a wireless router from China Ruiyin WAVLINK. A path traversal vulnerability exists in the WAVLINK AC3000 M33A8.V5030.210505 version, which stems from the diskpart parameter of the nas.cgi adddir function that fails to correctly filter for special elements in the resource or file...

The vulnerability of the `ucsi_ccg_update_set_new_cam_cmd()` function in the Linux kernel’s drivers/usb/typec/ucsi/ucsi_ccg.c file allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the ucsiccgupdatesetnewcamcmd function in the Linux kernel’s drivers/usb/typec/ucsi/ucsiccg.c file relates to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...

The vulnerability of the SMEM partition in Qualcomm’s security microprogramming software allows attackers to disclose protected information.

The vulnerability of the SMEM microprogramming software for Qualcomm processors lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47539: Fixed an out-of-bounds write in converttos3341a...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. boo1234449 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47539: Fixe...