CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

SurveyKing 安全漏洞

SurveyKing is a powerful questionnaire system and exam system for javahuang individual developers. A security vulnerability exists in SurveyKing v1.3.1, which originated from a vulnerability that allows an attacker to perform a session replay attack after a user changes their password...

CVE-2024-35048

CVE-2024-35048 affects SurveyKing v1.3.1, enabling a session replay attack after password changes. The CVSSv3.1 base score is 4.3 (Medium): Network vector, low privileges, no user interaction, with integrity impact Low. Exploitation status and concrete root cause are not detailed in the provided ...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

PT-2024-26296 · Unknown · Surveyking

Name of the Vulnerable Software and Affected Versions: SurveyKing version 1.3.1 Description: The issue allows attackers to execute a session replay attack after a user changes their password. Recommendations: For SurveyKing version 1.3.1, at the moment, there is no information about a newer versi...

RHEL 7 : ceph (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ceph: cephx protocol is vulnerable to replay attack CVE-2018-1128 - ceph: user/tenant can obtain access...

OESA-2024-1531 openssl security update

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography library. The project i...

SUSE CVE-2024-27040

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edpsetreplayallowactive' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling...

DEBIAN-CVE-2024-27040

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edpsetreplayallowactive' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling...

UBUNTU-CVE-2024-27040

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edpsetreplayallowactive' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling...

CVE-2024-27040 drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edpsetreplayallowactive' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling...

CVE-2024-27040 drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add 'replay' NULL check in 'edpsetreplayallowactive' In the first if statement, we're checking if 'replay' is NULL. But in the second if statement, we're not checking if 'replay' is NULL again before calling...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a failure to check if the value of "replay" is NULL...

Authentication Bypass By Capture-replay

LinOTP is vulnerable to Authentication Bypass By Capture-replay. The vulnerability is due to the activation of automatic resynchronization, allowing an attacker to successfully log in with OTP values recorded at a previous point in time...

CVE-2024-26925

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release mutex after nftgcseqend from abort path The commit mutex should not be released during the critical section between nftgcseqbegin and nftgcseqend, otherwise, async GC worker could collect expired...

CVE-2024-26925 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release mutex after nftgcseqend from abort path The commit mutex should not be released during the critical section between nftgcseqbegin and nftgcseqend, otherwise, async GC worker could collect expired...

The vulnerability of the KEYENCE CORPORATION’s programming software for programmable logic controllers, as well as the software for viewing and analyzing controller data, called KV REPLAY VIEWER, stems from a flaw related to memory-walking attacks. This flaw allows attackers to execute arbitrary code.

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software and the KV REPLAY VIEWER data viewing and analysis software lies in memory reading outside the bounds of the memory space. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the KEYENCE CORPORATION’s programming software for programmable logic controllers, as well as the data viewing and analysis software for controllers called KV REPLAY VIEWER, relates to writing beyond the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software and the KV REPLAY VIEWER data viewing and analysis software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remote...