747342 matches found
kernel: Kernel SMB client: Double-free vulnerability allows remote denial of service or privilege escalation
A flaw was found in the Linux kernel's Server Message Block SMB client. A double-free vulnerability exists in the SMB2ioctl replay path, where a response buffer can be freed twice under specific error conditions. A malicious or compromised SMB server could exploit this by sending crafted response...
kernel: smb: client: fix query_info() replay double-free
A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the queryinfo replay mechanism attempts to free a response buffer that has already been released. This can happen if an error occurs during the initialization of an SMB2...
kernel: af_unix: Unlink scc_entry in unix_del_edge()
A flaw was found in the Linux kernel's afunix component. A race condition during concurrent send and close operations can lead to the garbage collector GC partially freeing a Strongly Connected Component SCC. This inconsistent state may cause subsequent GC operations to iterate over a partially...
kernel: udf: fix partition descriptor append bookkeeping
A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...
kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...
CVE-2025-14018
CVE-2025-14018: NetBT e-Fatura 特権昇格の脆弱性 📋 一般情報 パラメータ| 値 ---|--- CVE ID| CVE-2025-14018 脆弱性の種類| ローカル特権昇格 引用符なしサービスパス CWE| CWE-428 影響を受ける製品| NetBT e-Fatura 脆弱なバージョン| sc qc InboxProcessor SC QueryServiceConfig SUCCESS SERVICENAME: InboxProcessor TYPE : 10 WIN32OWNPROCESS STARTTYPE : 2 AUTOSTART...
CVE-2026-85489
An authentication flaw in the Brocade ASCG administrative management service component allows unauthenticated network users to issue direct API requests. This vulnerability enables attackers to perform privileged actions, such as accessing sensitive system configuration mapping data , modifying m...
CVE-2026-85489
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...
EUVD-2026-94792
An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged actions, including accessing sensitive system configuration mapping data, modifying managed device inventories, and...
CVE-2022-3294
エクスプロイト参照: https://github.com/kubernetes/kubernetes/issues/113757 https://github.com/kubernetes/kubernetes/issues/119640 https://github.com/kubernetes/sig-security/blob/main/sig-security-external-audit/security-audit-2021-2022/findings/Kubernetes%20v1.24%20Final%20Report.pdf 列挙: 1...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 security and extras update
Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 . An unauthenticated attacker located on the local network can send manipulated API requests to the service endpoint to bypass path restrictions. This flaw could lead to arbitrary file read, ...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
EUVD-2026-94790
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-85423
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...
EUVD-2026-94788
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...
CVE-2026-85423
A vulnerability exists in the data collection service of Brocade ASCG versions prior to 3.5.0 . An API endpoint within the data collector service lacks proper authentication or authorization checks for incoming requests. An attacker with network access can exploit this to instruct the application...
CVE-2026-94246
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...