Lucene search
+L

8737 matches found

OSV
OSV
added 2024/06/25 6:16 p.m.9 views

USN-6848-1 roundcube vulnerabilities

Matthieu Faou and Denys Klymenko discovered that Roundcube incorrectly handled certain SVG images. A remote attacker could possibly use this issue to load arbitrary JavaScript code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.10. CVE-2023-5631 Rene...

6.1CVSS6.5AI score0.75873EPSS
SaveExploits7References6
Cvelist
Cvelist
added 2024/06/25 1:2 p.m.37 views

CVE-2024-6300 Incomplete Cleanup in Conduit

Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were present in the PDU before redaction...

3.7CVSS0.00289EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.28 views

WordPress Plugin Mime Types Extended Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.5CVSS6.2AI score0.0035EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2024/06/24 12:0 a.m.58 views

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-647)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-647 advisory. 2024-07-17: CVE-2024-30255 was added to this advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a serve...

8.2CVSS7.4AI score0.8781EPSS
SaveExploits7References20
Tenable Nessus
Tenable Nessus
added 2024/06/24 12:0 a.m.30 views

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-037 advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling...

8.2CVSS7.1AI score0.00693EPSS
SaveExploits6References18
SUSE CVE
SUSE CVE
added 2024/06/22 3:41 a.m.5 views

SUSE CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

4.4CVSS6.3AI score0.00258EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
added 2024/06/21 7:20 p.m.42 views

CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

5.1CVSS6.8AI score0.00258EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/21 11:15 a.m.2 views

DEBIAN-CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

5.5CVSS5.4AI score0.00258EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/21 11:15 a.m.36 views

CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

5.5CVSS0.00258EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2024/06/21 11:15 a.m.27 views

CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

5.5CVSS6.4AI score0.00258EPSS
SaveExploits0References31
OSV
OSV
added 2024/06/21 11:15 a.m.10 views

UBUNTU-CVE-2024-31076

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

5.5CVSS6.2AI score0.00258EPSS
SaveExploits0References32
Cvelist
Cvelist
added 2024/06/21 10:18 a.m.33 views

CVE-2024-31076 genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

0.00258EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/06/21 10:18 a.m.18 views

CVE-2024-31076 genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

6.6AI score0.00258EPSS
SaveExploits0References8
CVE
CVE
added 2024/06/21 10:18 a.m.187 views

CVE-2024-31076

CVE-2024-31076: Linux kernel CPU hotplug vector leak in genirq/cpuhotplug (x86/vector). Root cause: when interrupt affinity is reconfigured via procfs, old APIC vectors aren’t reclaimed if the old CPU goes offline before the next trigger on the new CPU, leaving apicd->prev_vector in vector_mat...

5.5CVSS6.5AI score0.00258EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2024/06/21 10:18 a.m.24 views

CVE-2024-31076 genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline

In the Linux kernel, the following vulnerability has been resolved: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline The absence of IRQDMOVEPCNTXT prevents immediate effectiveness of interrupt affinity reconfiguration via procfs. Instead, the change is deferred until the next...

6AI score
SaveExploits0References12
CNNVD
CNNVD
added 2024/06/21 12:0 a.m.7 views

CMSimple_XH Security Vulnerability

CMSimpleXH is a fast, small, easy-to-use and easy-to-install modular content management system CMS from CMSimpleXH open source. A security vulnerability exists in CMSimpleXH version 1.7.6, which stems from a cross-site scripting attack that can be performed by uploading a carefully crafted SVG...

6.1CVSS6.2AI score0.00713EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/06/21 12:0 a.m.9 views

The vulnerability of Adobe Audition’s audio editor, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of Adobe Audition is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially created malicious file...

5.5CVSS5.4AI score0.00382EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/21 12:0 a.m.9 views

PT-2024-25906 · Unknown · Cmsimple Xh

Name of the Vulnerable Software and Affected Versions: CMSimple XH version 1.7.6 Description: The issue allows for cross-site scripting XSS by uploading a crafted SVG document. Recommendations: For CMSimple XH version 1.7.6, as a temporary workaround, consider restricting the upload of SVG...

6.1CVSS6.3AI score0.00713EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/06/21 12:0 a.m.5 views

WordPress plugin WP SVG Images security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.4AI score0.00328EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/21 12:0 a.m.5 views

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from a problem in the genirq/cpuhotplug,x86/vector module...

5.5CVSS6.5AI score0.00258EPSS
SaveExploits0References10
Rows per page
Query Builder