Lucene search
+L

15542 matches found

Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2026-2872

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Time-of-Check to Time-of-Use TOCTOU race condition exists in the Linux kernel due to the repeated evaluation of arguments within the FAN FROM REG macro. This can lead to divide-by-zero...

4.7CVSS6.1AI score0.00105EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•14 views

PT-2026-2896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the md/raid5 component where null-pointer dereferences can occur in the raid5 store group thread cnt function. This happens when the mddev-private...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•28 views

PT-2026-2878

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's block layer related to request queue freezing within sysfs store callbacks. Freezing the request queue during these callbacks can lead to a deadlock...

8.2CVSS6.1AI score0.00448EPSS
SaveExploits0References227
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•12 views

PT-2025-41369

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s IOMMU subsystem for s390 architectures. Specifically, when a PCI device is unexpectedly removed surprise hotplug, attempts to attach the device to the...

7.8CVSS7AI score0.00187EPSS
SaveExploits0
Patchstack
Patchstack
•added 2024/12/30 7:53 p.m.•16 views

WordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Music Store versions = 1.1.19...

7.1CVSS6.1AI score0.00255EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2024/12/30 3:48 a.m.•23 views

SUSE CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References16
NVD
NVD
•added 2024/12/29 12:15 p.m.•33 views

CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

5.5CVSS0.00212EPSS
SaveExploits0References7
osv_azl
osv_azl
•added 2024/12/29 12:15 p.m.•26 views

AZL-55112 CVE-2024-56745 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/12/29 12:15 p.m.•15 views

DEBIAN-CVE-2024-56745

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

5.5CVSS6AI score0.00212EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/29 12:15 p.m.•26 views

AZL-55005 CVE-2024-56745 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/29 11:30 a.m.•36 views

CVE-2024-56745 PCI: Fix reset_method_store() memory leak

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

0.00212EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/12/29 11:30 a.m.•5 views

CVE-2024-56745 PCI: Fix reset_method_store() memory leak

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix resetmethodstore memory leak In resetmethodstore, a string is allocated via kstrndup and assigned to the local "options". options is then used in with strsep to find spaces: while name = strsep&options, " " != NULL If...

6.1AI score0.00212EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•4 views

PT-2024-37056

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel's PCI subsystem, specifically in the reset method store function. The issue occurred when a string was allocated via kstrndup an...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0
attackerkb
attackerkb
•added 2024/12/27 3:15 p.m.•16 views

CVE-2024-56584

In the Linux kernel, the following vulnerability has been resolved: iouring/tctx: work around xastore allocation error issue syzbot triggered the following WARNON: WARNING: CPU: 0 PID: 16 at iouring/tctx.c:51 iouringfree+0xfa/0x140 iouring/tctx.c:51 which is the WARNONONCE!xaempty&tctx-;xa; sanit...

5.5CVSS6.3AI score0.00238EPSS
SaveExploits0References7Affected Software1
osv_clsa
osv_clsa
•added 2024/12/27 2:54 p.m.•18 views

CLSA-2024-1735311253 squid: Fix of CVE-2023-5824

CVE-2023-5824: do not send serialized HTTP response header bytes in storeClientCopy answers. Ignore serialized header size when calling storeClientCopy...

7.5CVSS7.1AI score0.03026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•13 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from an incorrect allocation of xastore memory in the iouring/tctx subsystem...

5.5CVSS6.6AI score0.00238EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/12/27 12:00 a.m.•28 views

Splunk Secure Gateway Registration Method Sensitive Data Protection

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, is related to insufficient protection of sensitive data due to improper access control to the KV Store Key Value...

4.3CVSS6.6AI score0.00294EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2024/12/25 3:14 a.m.•17 views

CVE-2024-1609 OPPO Store APP has a WebView component privilege escalation vulnerability.

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation...

8.7CVSS5.9AI score0.00495EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/25 3:14 a.m.•88 views

CVE-2024-1609

CVE-2024-1609 affects the OPPOStore iOS App. The root cause is improper input validation that enables privilege escalation. Reported across multiple sources (NVD, Red Hat, CNNVD, CVE listings) with a CVSS v4.0 base score of 8.7 (HIGH): attack vector is NETWORK, privileges required NONE, user inte...

8.7CVSS5.9AI score0.00495EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/25 3:14 a.m.•53 views

CVE-2024-1609 OPPO Store APP has a WebView component privilege escalation vulnerability.

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation...

8.7CVSS0.00495EPSS
SaveExploits0References1
Rows per page
Query Builder