8757 matches found
DEBIAN-CVE-2024-57930
In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...
UBUNTU-CVE-2024-57930
In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the processstring function in the tracing module not properly handling array references. This could lead to fals...
Schneider Electric Web Designer XML External Object Reference
The vulnerability of the software used for creating automation projects in Schneider Electric’s Web Designer for network modules BMXNOE0110H, BMENOC0311C, BMENOC0321C, and BMXNOR0200H is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows ...
ALSA-2025:0401 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: go-git: argument injection via the URL field CVE-2025-21613 go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies CVE-2025-21614 For more...
CVE-2022-0303
creationtimestamp| type| source ---|---|--- 2025-01-17 23:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwga7snt2w 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs7sai2q...
Important: Red Hat Security Advisory: .NET 8.0 security update
An update for .NET 8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2024-13171
creationtimestamp| type| source ---|---|--- 2025-01-14 17:51:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827977672601993 2025-01-14 18:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubsqiua2t 2025-01-24 05:03:27+00:00| seen|...
CVE-2025-21341
creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumicocu2r 2025-01-15 01:56:36+00:00| seen|...
RHEL 8 : thunderbird (RHSA-2025:0284)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:0284 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 134...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2024-57875
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
IBM WebSphere Application Server XML External Object Disclosure
The vulnerability of IBM WebSphere Application Server Liberty and IBM WebSphere Application Server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...
CVE-2024-57875
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
CVE-2024-57875 block: RCU protect disk->conv_zones_bitmap
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
CVE-2024-57875 block: RCU protect disk->conv_zones_bitmap
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
CVE-2024-57875
CVE-2024-57875 affects the Linux kernel block layer, addressing an RCU-protection issue with disk->conv_zones_bitmap. The fix makes disk_zone_is_conv() run under the RCU read lock and adds disk_set_conv_zones_bitmap() to update the pointer via rcu_replace_pointer() under disk_zone_wplugs_lock....
CVE-2024-57792
creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1301 2025-01-11 13:17:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6c7u6e27 2025-01-11 13:44:24+00:00| seen|...