14294 matches found
CVE-2023-6111
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...
CVE-2023-6111
A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...
CVE-2023-6111
CVE-2023-6111 is a use-after-free in the Linux kernel netfilter nf_tables GC path: the function nft_trans_gc_catchall can fail to remove a catchall set element from catchall_list when sync is true, allowing a catchall element to be freed multiple times. This enables local privilege escalation. Th...
podman security, bug fix, and enhancement update
2:4.6.1-5.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.6.1-5 - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel https://github.com/containers/podman/commit/ea33dce - Related: 2176063 2:4.6.1-4 - amend podmansh provides...
CVE-2023-45319
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the commit function was identified. Reported by Jason Geffner...
CVE-2023-45319
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the commit function was identified. Reported by Jason Geffner...
Denial of service
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service DoS via the commit function was identified. Reported by Jason Geffner...
Perforce Software Perforce Helix Resource Management Error Vulnerability
Perforce Software Perforce Helix is an application software from Perforce Software, Inc. It provides application lifecycle management for products. A resource management error vulnerability exists in Perforce Software Perforce Helix versions prior to 2023.2, which stems from a vulnerability that...
PT-2023-29495 · Perforce · Helix Core
Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2023.2 Description: An unauthenticated remote Denial of Service DoS via the commit function was identified. This issue was reported by Jason Geffner. Recommendations: For Helix Core versions prior to 2023.2, updat...
kernel: drm/amd/display: Do not set DRR on pipe Commit
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit WHY Writing to DRR registers such as OTGVTOTALMIN on the same frame as a pipe commit can cause underflow...
PT-2025-18834 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.3.0-rc1 Description: A vulnerability in the Linux kernel has been resolved, related to the ACPI PPTT Processor Properties Topology Table. The issue occurred when the PPTT was absent from the system, causing th...
Code injection
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL parameter that is used in the code for displaying administration sections. This allows any user with read access to the document XWiki.AdminSheet ...
CVE-2023-46732 Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site scripting RXSS via the rev parameter that is used in the content of the content menu without escaping. If an attacker can convince a user to visit a...
Json response for search reveals Solr credentials
Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. Patches The issue is fixed in all supported versions of...
GHSA-V6XP-CCVX-W52M Json response for search reveals Solr credentials
Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. Patches The issue is fixed in all supported versions of...
Json response for search reveals Solr credentials
Impact An error in Ibexa's Solr search engine results in potential exposure of Solr credentials. This is a critical vulnerability and all supported versions of the engine are affected. Those not using the Solr search engine are not affected. Patches The issue is fixed in all supported versions of...
Download route allows filename change in eZpublish kernel
Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which could lead to misunderstandings and...
CVE-2023-46448
Reflected Cross-Site Scripting XSS vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images...
Ubuntu 23.10 : Linux kernel (StarFive) vulnerabilities (USN-6454-4)
The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6454-4 advisory. Kyle Zeng discovered that the netfilter subsystem in the Linux kernel contained a race condition in IP set operations in certain situations. A local attacker...