kernel: net: ena: Fix incorrect descriptor free behavior

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

SQL Injection

silverstripe/postgresql is vulnerable to SQL injection. The vulnerability is due to the inadequate handling of table names in the silverstripe/postgresql database adapter, which allows malicious SQL injection attacks if table names are not properly escaped or sanitized...

kernel: net: ena: Fix incorrect descriptor free behavior

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

kernel: net: ena: Fix incorrect descriptor free behavior

This is a vulnerability in the Linux kernel's Elastic Network Adapter ENA driver, which manages network interfaces on certain platforms. The driver utilizes two types of transmit TX queues: one for packets from the network stack and another for packets directed by XDP eXpress Data Path operations...

MAL-2024-6676 Malicious code in ardm_sqlite-adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adapter_sqlite3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in adapter_elasticsearch (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activerecord_jdbcsplice-adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6483 Malicious code in activerecord_jdbcsplice-adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6376 Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in source-registry-storage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a58e938437093f6d5a08c8a6adccfdf20c7352f33de3443cb19ae4f665a87928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-3035 Malicious code in source-registry-storage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a58e938437093f6d5a08c8a6adccfdf20c7352f33de3443cb19ae4f665a87928 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fdfe/ecf-http-adapter (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2276 Malicious code in @fdfe/ecf-http-adapter (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a security issue in scsi bfa...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the CellInfoListParserV2::FillCellInfo module of protocolnetadapter.cpp, which could result in out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the ProtocolVsimOperationAdapter module of protocolvsimadapter.cpp, which may allow out-of-bounds reads...

CVE-2021-47306

A vulnerability was found in the fzaprobe function in the Linux kernel's FDDI driver. Private data might be used after it has been freed, leading to an use-after-free issue, causing system instability or crashes if the freed data is accessed. Mitigation Red Hat has investigated whether a possible...

PT-2024-7650

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape, potentially allowing an attacker to escalate...