Lucene search
+L

10644 matches found

osv_ubuntu
osv_ubuntu
•added 2024/12/27 2:15 p.m.•23 views

UBUNTU-CVE-2024-53181

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...

5.5CVSS6.2AI score0.0025EPSS
SaveExploits0References46
osv_cve
osv_cve
•added 2024/12/27 1:49 p.m.•29 views

CVE-2024-53181 um: vector: Do not use drvdata in release

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...

6.2AI score
SaveExploits0References14
Cvelist
Cvelist
•added 2024/12/27 1:49 p.m.•34 views

CVE-2024-53181 um: vector: Do not use drvdata in release

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...

0.0025EPSS
SaveExploits0References9
CVE
CVE
•added 2024/12/27 1:49 p.m.•2354 views

CVE-2024-53181

CVE-2024-53181 refers to a Linux kernel vulnerability where vector_device_release could crash due to using drvdata after release. The fix removes drvdata access in release and uses container_of() to obtain the vector_device instance, preventing a crash and kernel panic from a segfault. The issue ...

5.5CVSS6.5AI score0.0025EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
•added 2024/12/27 1:49 p.m.•30 views

CVE-2024-53181

In the Linux kernel, the following vulnerability has been resolved: um: vector: Do not use drvdata in release The drvdata is not available in release. Let's just use containerof to get the vectordevice instance. Otherwise, removing a vector device will result in a crash: RIP:...

5.5CVSS5.6AI score0.0025EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•30 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of drvdata in the vectordevicerelease function in the um module...

7.8CVSS6.6AI score0.00481EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•5 views

PT-2024-35628

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of drvdata in release, which is not available. This can cause a crash when removing a...

5.5CVSS0.0025EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•26 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of drvdata in the vectordevicerelease function in the um module...

5.5CVSS6.6AI score0.0025EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•25 views

Linux kernel DoS

The vulnerability of the kernel component of the Linux operating system is related to an infinite loop. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00218EPSS
SaveExploits0References19Affected Software2
Positive Technologies
Positive Technologies
•added 2024/12/24 12:00 a.m.•30 views

PT-2024-16383 · WordPress · Directorypress

Name of the Vulnerable Software and Affected Versions: DirectoryPress – Business Directory And Classified Ad Listing plugin for WordPress versions up to, and including, 3.6.16 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input...

5.4CVSS8.2AI score0.00301EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2024/12/23 12:00 a.m.•31 views

Debian: Security Advisory (DLA-3998-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.9AI score0.0136EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•16 views

PT-2024-39722 · WordPress · Wp Shapes

Name of the Vulnerable Software and Affected Versions: WP SHAPES plugin for WordPress versions up to, and including, 1.0.0 Description: The issue is related to stored Cross-Site Scripting via SVG file uploads due to insufficient input sanitization and output escaping. This allows authenticated...

6.4CVSS8.4AI score0.00283EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•28 views

PT-2024-36800 · Unknown · Grist-Core

Name of the Vulnerable Software and Affected Versions: grist-core versions prior to 1.3.2 Description: The issue concerns a spreadsheet hosting server where a user's account could be compromised by visiting a malicious document and previewing an attachment. This happens because JavaScript in an S...

8.1CVSS7.1AI score0.00297EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•35 views

PT-2024-36567 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. An attacker must first obta...

7.8CVSS7.3AI score0.00331EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2024/12/19 9:24 p.m.•16 views

WordPress WP SHAPES plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin WP SHAPES versions 1.0.0...

6.4CVSS5.8AI score0.00283EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
•added 2024/12/19 12:00 a.m.•29 views

Ubuntu: Security Advisory (USN-7159-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.00753EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/12/19 12:00 a.m.•24 views

Ubuntu: Security Advisory (USN-7171-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits23References4
OpenVAS
OpenVAS
•added 2024/12/18 12:00 a.m.•39 views

Ubuntu: Security Advisory (USN-7173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.00788EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2024/12/18 12:00 a.m.•21 views

SUSE: Security Advisory (SUSE-SU-2024:4352-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.2AI score0.00926EPSS
SaveExploits2References6
OpenVAS
OpenVAS
•added 2024/12/17 12:00 a.m.•24 views

Fedora: Security Advisory (FEDORA-2024-c4377d35e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS7.5AI score0.00973EPSS
SaveExploits1References6
Rows per page
Query Builder