Lucene search
+L

7232 matches found

Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.10 views

PT-2024-38294 · Unknown · Sourcecodester Tracking Monitoring Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Tracking Monitoring Management System version 1.0 Description: A critical issue was found in the SourceCodester Tracking Monitoring Management System. The problem affects an unknown function of the file /manage person.php. The...

9.8CVSS8.1AI score0.00578EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.10 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in the SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the username parameter...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.10 views

PT-2024-38290 · Sourcecodester · Sourcecodester Tracking Monitoring Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Tracking Monitoring Management System version 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file "/ajax.php?action=save establishment". The manipulation of the name argume...

6.1CVSS6.9AI score0.00453EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/08/01 12:00 a.m.9 views

PT-2024-38292 · Sourcecodester · Sourcecodester Tracking Monitoring Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Tracking Monitoring Management System version 1.0 Description: A critical issue was found in the system, affecting the /ajax.php?action=save establishment file. The manipulation of the id argument leads to SQL injection. The...

9.8CVSS7.8AI score0.00544EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/08/01 12:00 a.m.11 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.00551EPSS
SaveExploits1References5
Circl
Circl
added 2024/07/30 6:07 a.m.10 views

CVE-2024-39143

creationtimestamp| type| source ---|---|--- 2024-07-30 06:07:39+00:00| seen| MISP/208fff40-924d-4a4f-89c3-a3d69f7033c1 2025-04-10 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmifneftw62t...

5.4CVSS5.5AI score0.00928EPSS
SaveExploits3References1
OSV
OSV
added 2024/07/29 3:15 p.m.1 views

DEBIAN-CVE-2024-41040

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN: slab-use-after-free in tcfctflowtableprocessconn+0x12b/0x380 actct Read of size 1 at addr ffff888c07603600 by task handler130/6469 Call Trace:...

7CVSS5.7AI score0.01EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.10 views

Comodo Firewall 安全漏洞

Comodo Firewall is a suite of firewall software from the American company Comodo. The software has firewall filtering, intrusion protection, and other features. Comodo Firewall has a security vulnerability that stems from the presence of a link-tracking local elevation of privilege vulnerability,...

7.8CVSS7.9AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.7 views

Comodo Internet Security Pro 安全漏洞

Comodo Internet Security Pro is an Internet security suite from Comodo, USA. A security vulnerability exists in Comodo Internet Security Pro that stems from a link-tracking local elevation of privilege vulnerability in the cmdagent executable. An attacker can exploit this vulnerability to elevate...

7.8CVSS7.9AI score0.00319EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.11 views

Comodo Internet Security Pro 安全漏洞

Comodo Internet Security Pro is an Internet security suite from Comodo, USA. A security vulnerability exists in Comodo Internet Security Pro that stems from a link-tracking local elevation of privilege vulnerability in the cmdagent executable. An attacker can exploit this vulnerability to elevate...

7.8CVSS7.9AI score0.00319EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/23 12:00 a.m.10 views

Canarytokens 安全漏洞

Canarytokens is an open source web activity tracking system from Thinkst Applied Research. A security vulnerability exists in Canarytokens that stems from a server-side request forgery vulnerability that was discovered in the Webhook alert feature...

5.4CVSS6.8AI score0.00381EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/07/17 1:06 a.m.10 views

kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map

A vulnerability was found in the mlx5etxwqecomplete function in the Linux kernel. The CPU or compiler may reorder two of the functions: mlx5eptpmetadatamapput and mlx5eptpsqtrackmetadata, and a situation could arise where metadata tracking occurs before the metadata map is fully populated. This...

5.5CVSS7.2AI score0.00227EPSS
SaveExploits0References5
OSV
OSV
added 2024/07/17 12:00 a.m.38 views

ALSA-2024:4583 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: TIPC message reassembly use-after-free remote code execution vulnerability CVE-2024-36886 kernel: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbypo...

9.8CVSS8.5AI score0.01358EPSS
SaveExploits1References36
RedhatCVE
RedhatCVE
added 2024/07/16 4:26 p.m.26 views

CVE-2024-40944

A vulnerability was found in the Linux kernel's x86/kexec component, where the function call to ccplatformhas could lead to a system crash when call depth tracking is active. This issue occurs because the GS segment is reset by loadsegments, setting GSBASE to 0, while call depth tracking relies o...

4.1CVSS8.2AI score0.00239EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/12 1:55 p.m.21 views

SUSE-SU-2024:2463-1 Security update for squashfs

This update for squashfs fixes the following issues: - CVE-2015-4645,CVE-2015-4646: Multiple buffer overflows fixed in squashfs-tools bsc935380 - CVE-2021-40153: Fixed an issue where an attacker might have been able to write a file outside of destination bsc1189936 - CVE-2021-41072: Fixed an issu...

8.1CVSS7.7AI score0.0691EPSS
SaveExploits2References8
OSV
OSV
added 2024/07/12 1:15 p.m.8 views

DEBIAN-CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS4.8AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/12 1:15 p.m.26 views

CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS0.00239EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/07/12 1:15 p.m.34 views

CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS5.7AI score0.00239EPSS
SaveExploits0References12
OSV
OSV
added 2024/07/12 1:15 p.m.8 views

UBUNTU-CVE-2024-40944

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix bug with call depth tracking The call to ccplatformhas triggers a fault and system crash if call depth tracking is active because the GS segment has been reset by loadsegments and GSBASE is now 0 but call depth...

5.5CVSS5.7AI score0.00239EPSS
SaveExploits0References13
CVE
CVE
added 2024/07/12 12:25 p.m.109 views

CVE-2024-40944

CVE-2024-40944 affects the Linux kernel (x86/kexec). The vulnerability is a bug in call depth tracking where calling cc_platform_has() may fault if depth tracking is active because GS_BASE is reset to 0 by load_segments(). The mitigation described in the documentation is to invoke cc_platform_has...

5.5CVSS6.5AI score0.00239EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder