Lucene search
+L

8800 matches found

OSV
OSV
added 2024/07/30 8:15 a.m.17 views

AZL-47232 CVE-2024-42230 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL reloconexc, required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL i...

4.4CVSS6.5AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/30 7:47 a.m.342 views

CVE-2024-42230

In CVE-2024-42230, the Linux kernel on pseries PowerPC is affected by a scv instruction crash when kexec is used. The root cause is that kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before all CPUs have been shut down, allowing scv instructions to execute af...

4.4CVSS7AI score0.00205EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/07/30 7:47 a.m.29 views

CVE-2024-42230 powerpc/pseries: Fix scv instruction crash with kexec

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL reloconexc, required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL i...

0.00205EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.8 views

WonderCMS 安全漏洞

WonderCMS is an open source PHP-based content management system CMS from WonderCMS Inc. A security vulnerability exists in WonderCMS version 3.4.3, which stems from an arbitrary file upload vulnerability in the uploadFileAction function, allowing an attacker to execute arbitrary code via a crafte...

5.4CVSS7.7AI score0.00359EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an uninitialized wxnumqvectors in the net:txgbe module when using MSI/INTx interrupts, resulting in a...

5.5CVSS6.6AI score0.00239EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.8 views

streamlit-geospatial 代码问题漏洞

streamlit-geospatial is an Open Geospatial Solutions open source streamlit multi-page application for geospatial applications. A code issue vulnerability exists in streamlit-geospatial that stems from pages/9? The url variable in VectorDataVisualization.py accepts user input, which is then passed...

9.8CVSS7AI score0.00786EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/26 12:0 a.m.7 views

PT-2024-5305 · Phpipam · Phpipam

Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to Cross Site Scripting XSS in the phpipam application. Specifically, the "/app/admin/widgets/edit.php" endpoint is vulnerable. This vulnerability can be exploited by a remote attacker to...

7.1CVSS5.2AI score0.00326EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/07/26 12:0 a.m.9 views

SyroTech SY-GPON-1110-WDONT 安全漏洞

The SyroTech SY-GPON-1110-WDONT is a wireless router from SyroTech. The SyroTech SY-GPON-1110-WDONT suffers from an information disclosure vulnerability that stems from a missing security flag in a session cookie associated with the router's web management interface. An attacker could exploit thi...

6.9CVSS6AI score0.00207EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/24 11:15 a.m.5 views

CVE-2024-6896

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

5.4CVSS5.9AI score0.00329EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/07/24 12:0 a.m.10 views

PT-2024-19015 · Atlassian · Bitbucket

Name of the Vulnerable Software and Affected Versions: Bitbucket Data Center versions 8.0.0 through 8.9.12 Bitbucket Data Center versions 8.19.0 through 8.19.1 Description: The issue is an open redirect vulnerability that allows an unauthenticated attacker to redirect a victim user upon login to...

4.3CVSS4AI score0.00248EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/07/23 12:0 a.m.11 views

Telegram 安全漏洞

Telegram is an instant messaging mobile application open-sourced by Telegram. A security vulnerability exists in Telegram version 10.14.4 and earlier versions. An attacker exploiting the vulnerability could send a malicious application disguised as a video...

7.1CVSS9.2AI score0.01364EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2024/07/19 7:0 a.m.6 views

Potential memory exhaustion attack due to sparse slice deserialization

...

7.5CVSS7.5AI score0.01105EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/17 12:53 p.m.32 views

Security Bulletin: Multiple vulnerabilities in IBM JAVA JDK affect IBM Storage Scale packaged in IBM Storage Scale System

Summary Multiple vulnerabilities in IBM Java JDK, used by IBM Storage Scale System GUI, could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact and no availability impact. CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926,...

7.4CVSS6.8AI score0.01035EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2024/07/17 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-6893-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.01401EPSS
SaveExploits1References2
NVD
NVD
added 2024/07/16 11:15 p.m.37 views

CVE-2024-21126

Vulnerability in the Oracle Database Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.23 and 21.3-21.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Oracle Database Portable...

5.8CVSS0.00493EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/07/16 9:31 p.m.12 views

OpenJDK: potential UTF8 size overflow (8314794)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

3.7CVSS7.4AI score0.0104EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/07/16 12:0 a.m.44 views

Ubuntu: Security Advisory (USN-6898-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.01401EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2024/07/15 5:10 a.m.58 views

New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

Cybersecurity researchers have shed light on a new version of a ransomware strain called HardBit that comes packaged with new obfuscation techniques to deter analysis efforts. "Unlike previous versions, HardBit Ransomware group enhanced the version 4.0 with passphrase protection," Cybereason...

9.8CVSS7.3AI score0.99949EPSS
SaveExploits6
Patchstack
Patchstack
added 2024/07/15 2:37 a.m.6 views

WordPress Support SVG plugin < 1.1.0 - Stored XSS via SVG Upload vulnerability

Stored XSS via SVG Upload vulnerability discovered by Rayhan Ramdhany Hanaputra in WordPress Plugin Support SVG versions 1.1.0...

6.1CVSS6AI score0.00396EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/15 12:0 a.m.16 views

PT-2024-18926 · Unknown · Langchain Experimental +1

Name of the Vulnerable Software and Affected Versions: langchain-experimental versions 0.0.15 through 0.0.21 Description: The issue allows for Arbitrary Code Execution when retrieving values from the database. An attacker can exploit this by controlling the input prompt and executing arbitrary...

9CVSS7.9AI score0.01864EPSS
SaveExploits1References12
Rows per page
Query Builder