Lucene search
+L

4340 matches found

OSV
OSV
•added 2025/02/28 10:53 a.m.•31 views

USN-7303-2 linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

9.8CVSS6.7AI score0.01369EPSS
SaveExploits0References209
OSV
OSV
•added 2025/02/28 3:15 a.m.•24 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.7AI score0.00127EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/28 3:15 a.m.•18 views

CVE-2024-54173

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/28 2:22 a.m.•10 views

CVE-2024-54173 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS4.4AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/28 2:22 a.m.•19 views

CVE-2024-54173 IBM MQ information disclosure

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS0.00127EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/28 2:22 a.m.•93 views

CVE-2024-54173

IBM MQ (versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD) is affected by CVE-2024-54173, which can disclose potentially sensitive information from trace files read by a local user when webconsole trace is enabled. The root cause is improper management of sensitive trace data (CWE-1323). Impact is lo...

4.7CVSS4.8AI score0.00127EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•5 views

PT-2025-9047 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD Description: The issue allows potentially sensitive information in trace files to be read by a local user when the web console trace is enabled. Recommendations: For IBM MQ versions 9.3 LTS...

4.7CVSS5.5AI score0.00127EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•0 views

CVE-2024-54173: Improper Management of Sensitive Trace Data

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled...

4.7CVSS5.7AI score0.00127EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/27 8:54 p.m.•25 views

Security Bulletin: IBM MQ Console is affected by a password disclosure vulnerability (CVE-2024-54173)

Summary IBM MQ Console has addressed a password disclosure vulnerability Vulnerability Details CVEID:CVE-2024-54173 DESCRIPTION: IBM MQ reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enabled. CWE:CWE-1323: Improper Management o...

4.7CVSS5.6AI score0.00127EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/27 8:38 p.m.•21 views

Security Bulletin: IBM MQ Appliance Console is affected by a sensitive information disclosure vulnerability (CVE-2024-54173)

Summary IBM MQ Appliance has addressed a sensitive information disclosure vulnerability in the IBM MQ Console. Vulnerability Details CVEID:CVE-2024-54173 DESCRIPTION: IBM MQ reveals potentially sensitive information in trace files that could be read by a local user when webconsole trace is enable...

4.7CVSS5.7AI score0.00127EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/02/27 3:15 a.m.•16 views

CVE-2024-49570

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TPprintk UAF The commit afd2627f727b "tracing: Check "%s" dereference via the field and not the TPprintk format" exposes potential UAFs in the xebomove trace event. Fix those by avoiding...

7.8CVSS0.00225EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:08 a.m.•10 views

SUSE CVE-2022-49322

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting bootparams="traceevent=initcall:initcallstart tpprintk=1" in the cmdline, the outputprintk was called, and the spinlockirqsave was called in the...

5.5CVSS6.5AI score0.00215EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2025/02/27 3:05 a.m.•7 views

SUSE CVE-2022-49540

In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpusreadlock/unlock is not keeping online cpumask stable. The transient online mask results in below calltrace. 0.324121 CPU1: Booted secondary processo...

4.7CVSS6.2AI score0.00188EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:04 a.m.•6 views

SUSE CVE-2022-49622

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid skb access on nfstolen When verdict is NFSTOLEN, the skb might have been freed. When tracing is enabled, this can result in a use-after-free: 1. access to skb-nftrace 2. access to skb-mark 3. computatio...

5.5CVSS7.7AI score0.00255EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/02/27 3:02 a.m.•9 views

SUSE CVE-2022-49725

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem w...

5.5CVSS6.6AI score0.003EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/02/27 2:18 a.m.•20 views

CVE-2024-49570 drm/xe/tracing: Fix a potential TP_printk UAF

In the Linux kernel, the following vulnerability has been resolved: drm/xe/tracing: Fix a potential TPprintk UAF The commit afd2627f727b "tracing: Check "%s" dereference via the field and not the TPprintk format" exposes potential UAFs in the xebomove trace event. Fix those by avoiding...

0.00225EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•9 views

PT-2025-8890 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A vulnerability in the Linux kernel has been resolved. The issue occurs when trying to mmap a trace instance buffer that is attached to reserve mem, causing a crash. The reason for...

7.7AI score0.00216EPSS
SaveExploits0References13
NVD
NVD
•added 2025/02/26 7:01 a.m.•17 views

CVE-2022-49725

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem w...

7.8CVSS0.003EPSS
SaveExploits0References7
OSV
OSV
•added 2025/02/26 7:01 a.m.•5 views

DEBIAN-CVE-2022-49725

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem w...

5.5CVSS5.4AI score0.003EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/26 7:01 a.m.•5 views

DEBIAN-CVE-2022-49622

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: avoid skb access on nfstolen When verdict is NFSTOLEN, the skb might have been freed. When tracing is enabled, this can result in a use-after-free: 1. access to skb-nftrace 2. access to skb-mark 3. computatio...

7.8CVSS5.4AI score0.00255EPSS
SaveExploits0References1
Rows per page
Query Builder