Lucene search
+L

935 matches found

RedHat Linux
RedHat Linux
•added 2024/03/13 9:11 a.m.•15 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/03/12 12:48 a.m.•36 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•29 views

[SECURITY] Fedora 40 Update: xmlunit-2.9.0-11.fc40

XMLUnit provides you with the tools to verify the XML you emit is the one you want to create. It provides helpers to validate against an XML Schema, assert the values of XPath queries or compare XML documents against expected outcome s...

8.8CVSS9.1AI score0.02578EPSS
SaveExploits3
OSV
OSV
•added 2024/02/29 1:43 a.m.•17 views

CVE-2024-0514

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the addtocompare function. This makes it possible for unauthenticated attackers to add...

4.3CVSS5.7AI score0.00244EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/29 1:43 a.m.•39 views

CVE-2024-0515

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the removefromcompare function. This makes it possible for unauthenticated attackers to...

4.3CVSS4.2AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/29 1:43 a.m.•14 views

CVE-2024-0515

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the removefromcompare function. This makes it possible for unauthenticated attackers to...

4.3CVSS5.7AI score0.00208EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/29 1:43 a.m.•39 views

Cross site request forgery (csrf)

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.87. This is due to missing or incorrect nonce validation on the removefromcompare function. This makes it possible for unauthenticated attackers to...

4.3CVSS6.6AI score0.00208EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/02/27 10:15 a.m.•18 views

CVE-2021-46921

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queuedwritelockslowpath While this code is executed with the waitlock held, a reader can acquire the lock without holding waitlock. The writer side loops checking the value with the...

5.5CVSS6.2AI score0.00237EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2024/02/27 10:15 a.m.•11 views

UBUNTU-CVE-2021-46921

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queuedwritelockslowpath While this code is executed with the waitlock held, a reader can acquire the lock without holding waitlock. The writer side loops checking the value with the...

7.8CVSS6.2AI score0.00237EPSS
SaveExploits0References8
Prion
Prion
•added 2024/02/27 10:15 a.m.•33 views

Spoofing

In the Linux kernel, the following vulnerability has been resolved: locking/qrwlock: Fix ordering in queuedwritelockslowpath While this code is executed with the waitlock held, a reader can acquire the lock without holding waitlock. The writer side loops checking the value with the...

7.1AI score0.00237EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/02/20 12:35 p.m.•14 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/02/20 12:31 p.m.•19 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/02/20 12:00 a.m.•22 views

PT-2024-15630 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.3.87 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the add to compare function...

4.3CVSS9.3AI score0.00244EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/02/20 12:00 a.m.•17 views

PT-2024-15631 · WordPress · The Royal Elementor Addons/Templates

Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons and Templates plugin for WordPress versions up to, and including, 1.3.87 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the remove from compare...

4.3CVSS9.3AI score0.00208EPSS
SaveExploits0References5
OSV
OSV
•added 2024/02/11 3:15 a.m.•8 views

DEBIAN-CVE-2024-25714

In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. The fix uses gnutlsmemcmp, which has constant-time execution...

9.8CVSS5.3AI score0.00814EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/02/07 4:33 p.m.•14 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/25 11:04 a.m.•18 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/25 9:45 a.m.•15 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/25 9:43 a.m.•17 views

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

7.8CVSS6.4AI score0.00238EPSS
SaveExploits0References5
OSV
OSV
•added 2024/01/22 4:15 a.m.•12 views

ALPINE-CVE-2024-23771

darkhttpd before 1.15 uses strcmp which is not constant time to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel...

9.8CVSS7AI score0.01055EPSS
SaveExploits0References1
Rows per page
Query Builder