8174 matches found
PT-2025-14292
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue in the Linux kernel has been resolved. The problem occurred when the fence release processing was not properly handled, leading to potential recursive locking detected...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized nelem field during abort all task initialization in pm8001, which could result in an invali...
CVE-2022-49120: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix task leak in pm8001sendabortall In pm8001sendabortall, make sure to free the allocated sas task if pm8001tagalloc or pm8001mpibuildcmd fail...
CVE-2022-49182: Use After Free
In the Linux kernel, the following vulnerability has been resolved: net: hns3: add vlan list lock to protect vlan list When adding port base VLAN, vf VLAN need to remove from HW and modify the vlan state in vf VLAN list as false. If the periodicity task is freeing the same node, it may cause "use...
PT-2025-14278
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the pick task scx function picking non-queued tasks when called without balance. The issue arises from a fair class bug...
February 25, 2025—KB5052093 (OS Build 26100.3323) Preview
None None...
PT-2025-28009
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition in the Linux kernel's scheduler can cause crashes, including kernel panics with various crash signatures such as assert failures, page faults, null pointer dereference...
The vulnerability of the task and project management service WEEEK lies in the lack of measures taken to protect the website structure, allowing a perpetrator to execute arbitrary JavaScript code.
The vulnerability of the WEEEK task and project management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary JavaScript code...
CVE-2025-22207
Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...
CVE-2025-22207
CVE-2025-22207 is a Joomla! SQL injection in the backend task list of the com_scheduler component caused by improperly built ORDER clauses. Affected versions include Joomla! 4.x earlier than 4.4.11 and 5.x earlier than 5.2.4, per connected scanner/NVD data. The vulnerability allows an attacker to...
PT-2025-6940
Name of the Vulnerable Software and Affected Versions: com scheduler affected versions not specified Description: The issue is related to improperly built order clauses, which lead to a SQL injection vulnerability in the backend task list of com scheduler. This vulnerability may allow attackers t...
CVE-2025-22207: Improper Neutralization of Special Elements used in an SQL Command
Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of comscheduler...
CVE-2024-13500: Improper Neutralization of Special Elements used in an SQL Command
The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.6.17 due to insufficient escaping on the user supplied...
Directory Traversal
Overview label-studio is a Label Studio annotation tool Affected versions of this package are vulnerable to Directory Traversal via the download function due to improper input validation when processing image references during task exports. . An attacker can access files outside the intended...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the download function due to improper input validation when processing image references during task exports. . An attacker can access files outside the intended directory structure by creating tasks with path...
CVE-2023-42663
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated wit...
CVE-2023-39508
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authenticated user to bypass some of the restrictions put in place. It allows to execute code in the...
CVE-2024-28276
Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...
CVE-2024-28277
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...