kernel: md/raid10: fix leak of 'r10bio->remaining' for recovery

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio-remaining' for recovery raid10syncrequest will add 'r10bio-remaining' for both rdev and replacement rdev. However, if the read io fails, recoveryrequestwrite returns without issuing the write io, in...

kernel: md/raid10: fix null-ptr-deref in raid10_sync_request

A null pointer dereference flaw was found in the Linux kernel's RAID10 implementation. When recovery is skipped on a clean array, initresync is called but closesync is not, leaving conf-havereplacement incorrectly set to 0. If a replacement device is later added and recovery is triggered, replbio...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected:Windows ...

Microsoft DWM Core Library Security Vulnerability

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A security vulnerability exists in Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected:Windows 10 Versi...

Microsoft Windows Protected EAP Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Protected EAP PEAP. An attacker could exploit the vulnerability to remotely execute code. The following products...

PT-2023-23298 · Sap · Sap Business One

Name of the Vulnerable Software and Affected Versions: SAP Business One version 10.0 Description: The SAP Business One installation does not perform proper authentication and authorization checks for SMB shared folders. This allows any malicious user to read and write to the SMB shared folder...

IBM CICS TX Security Vulnerability

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A security vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from a vulnerability that allows an attacker to obtain a cookie value by sending a link to a user...

IBM CICS TX 安全漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can...

CVE-2023-6084

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

CVE-2023-6054

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/manage/lock.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-47238

A vulnerability in Ajay Top 10 top-10.This issue affects Top 10: from n/a through = 3.3.2...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle versions prior to 4.2 through 4.2.2, 4.1 through 4.1.5, 4.0 through 4.0.10, 3.11 through...

PT-2023-8441 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.1, 10.5, and 11.1 Description: The issue is related to insufficient input validation in the IBM DB2 database management system and the IBM DB2 Connect Server. It allo...

WordPress Plugin Top 10 - WordPress Popular posts by WebberZone Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...

mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc...

CVE-2023-42361

Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via use of crafted image during PDF export...

CVE-2023-42361

Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via use of crafted image during PDF export...

kernel: md/raid10: fix null-ptr-deref in raid10_sync_request

A null pointer dereference flaw was found in the Linux kernel's RAID10 implementation. When recovery is skipped on a clean array, initresync is called but closesync is not, leaving conf-havereplacement incorrectly set to 0. If a replacement device is later added and recovery is triggered, replbio...

kernel: md/raid10: fix memleak of md thread

A memory leak was found in the MD RAID10 driver. When raid10run fails after setupconf succeeds but before mddev-thread is set, the conf-thread is not freed, leaking kernel thread resources...