Amazon Linux 2023 : apache-commons-lang3 (ALAS2023-2025-1150)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1150 advisory. Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0...

CVE-2024-49600

Dell Power Manager DPM, versions prior to 3.17, contain an improper access control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.17, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute...

File deletion vulnerability in SongCMS PHP version (CNVD-2020-45319)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS PHP version v3.17 version of the arbitrary file deletion vulnerability, an...

PT-2014-5436 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.17.2 Description: The issue is related to the KVM subsystem in the Linux kernel, where a flaw in the arch/x86/kvm/emulate.c file allows guest OS users to cause a denial of service guest OS crash via a crafted...

UBUNTU-CVE-2014-8086

Race condition in the ext4filewriteiter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service file unavailability via a combination of a write action and an FSETFL fcntl operation for the ODIRECT flag...