D-Link DSL6740C Path Traversal Vulnerability

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to cau...

CVE-2024-10921

CVE-2024-10921 affects MongoDB Server: v5.0 prior to 5.0.30; v6.0 prior to 6.0.19; v7.0 prior to 7.0.15; and v8.0 prior to and including 8.0.2. The vulnerability arises from improper handling of BSON, allowing an authorized network user to trigger crashes or read buffer contents via specially cra...

CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

CVE-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

CVE-2024-10976

Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query, security invok...

mongodb -- Buffer over-reads in MongoDB Server

[email protected] reports: An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server...

The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to influence the accessibility of protected information.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to read misses outside of the memory boundary. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

kernel: drm/vmwgfx: Fix invalid reads in fence signaled events

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drmevent to the size of the structure that's actually used. The length of the drmevent was set to the parent structure instead of to the...

D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to cau...

Cisco Identity Services Engine Path Traversal Vulnerability (CNVD-2025-06738)

Cisco Identity Services Engine is an environment-aware platform from Cisco USA. A path traversal vulnerability exists in Cisco Identity Services Engine, which stems from insufficient filtering and validation of user-supplied parameters in API requests. An attacker could exploit this vulnerability...

SUSE CVE-2024-50179

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

PT-2024-37051 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to memory corruption that can occur due to NFSv3 LOCALIO reads leaving garbage in res.replen. This happens when nfs3 read done copies the value into server-read...

DEBIAN-CVE-2024-50179

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

AZL-53799 CVE-2024-50179 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

CVE-2024-50179

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

CVE-2024-50179

In CVE-2024-50179, the Linux kernel vulnerability stems from the direct-io read path attempting to mark pages dirty without holding Firmware (Fw) caps, which could lead to an incorrect Fw reference during page dirtying. The fix, as described in the initial document, is a patch that ceph applies: ...

CVE-2024-50179 ceph: remove the incorrect Fw reference check when dirtying pages

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

CVE-2024-50179 ceph: remove the incorrect Fw reference check when dirtying pages

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference...

Wasm3 安全漏洞

Wasm3 is a fast WebAssembly interpreter and the most versatile WASM runtime from the Wasm3 open source. A security vulnerability exists in Wasm3 version 139076a, which stems from an invalid memory read attack that results in a denial of service and potentially code execution...