Lucene search
K

4316 matches found

OSV
OSV
added 2025/01/15 1:15 p.m.4 views

AZL-55831 CVE-2024-57887 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...

7.8CVSS6.7AI score0.00205EPSS
Exploits0References1
OSV
OSV
added 2025/01/15 1:15 p.m.2 views

DEBIAN-CVE-2024-57887

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...

7.8CVSS6.2AI score0.00205EPSS
Exploits0References1
OSV
OSV
added 2025/01/15 1:15 p.m.2 views

UBUNTU-CVE-2024-57887

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...

7.8CVSS6.5AI score0.00205EPSS
Exploits0References22
OSV
OSV
added 2025/01/14 1:15 a.m.0 views

UBUNTU-CVE-2024-57658

An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00722EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/01/14 12:0 a.m.3 views

PT-2025-8864

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc1+ 1464 Description A issue has been identified in the Linux kernel where the use of btrfs set item key safe to modify keys in the RAID stripe-tree can lead to corruption of the tree. This corruption is...

5.5CVSS5.8AI score0.00161EPSS
Exploits0References21
RedhatCVE
RedhatCVE
added 2025/01/13 2:23 p.m.15 views

CVE-2024-55639

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

5.5CVSS6.8AI score0.00199EPSS
Exploits0References4
NVD
NVD
added 2025/01/13 2:15 p.m.9 views

CVE-2025-22499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...

7.1CVSS0.00246EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/13 1:11 p.m.9 views

CVE-2025-22499 WordPress F4 Post Tree Plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...

7.1CVSS8.6AI score0.00246EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/13 1:11 p.m.15 views

CVE-2025-22499 WordPress F4 Post Tree Plugin <= 1.1.18 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...

7.1CVSS0.00246EPSS
Exploits0References1
CVE
CVE
added 2025/01/13 1:11 p.m.24 views

CVE-2025-22499

CVE-2025-22499 is a real, active vulnerability in the F4 Post Tree plugin where improper input neutralization during web page generation allows a reflected Cross-Site Scripting (XSS) attack. Affected range is listed as from n/a through 1.1.18. Red Hat’s entry confirms the same description and imp...

7.1CVSS7.2AI score0.00246EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/01/13 7:50 a.m.10 views

CVE-2024-41935

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it ma...

5.5CVSS6.9AI score0.00221EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.1 views

WordPress plugin F4 Post Tree 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7.7AI score0.00246EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.2 views

PT-2025-4494 · Unknown · Faktor Vier F4 Post Tree

The vulnerable software is FAKTOR VIER F4 Post Tree, with versions ranging from n/a to 1.1.18. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting' XSS, which allows Reflected XSS. This vulnerability can be exploited by attacker...

7.1CVSS6.8AI score0.00246EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00722EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.4 views

The vulnerability of the add inode_ref() function in the fs/btrfs/tree-log.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the add inoderef function in the fs/btrfs/tree-log.c file of the Btrfs file system in Linux kernels is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS7.3AI score0.00214EPSS
Exploits0References19Affected Software6
SUSE CVE
SUSE CVE
added 2025/01/12 12:22 a.m.1 views

SUSE CVE-2024-41935

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it ma...

7.1CVSS7.5AI score0.00221EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/01/12 12:15 a.m.0 views

SUSE CVE-2024-55639

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

7CVSS7.6AI score0.00199EPSS
Exploits0References14
OSV
OSV
added 2025/01/11 1:15 p.m.5 views

DEBIAN-CVE-2024-55639

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

5.5CVSS5.7AI score0.00199EPSS
Exploits0References1
NVD
NVD
added 2025/01/11 1:15 p.m.8 views

CVE-2024-55639

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

5.5CVSS0.00199EPSS
Exploits0References3
OSV
OSV
added 2025/01/11 1:15 p.m.4 views

DEBIAN-CVE-2024-41935

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it ma...

7.1CVSS5.7AI score0.00221EPSS
Exploits0References1
Rows per page
Query Builder