18382 matches found
SUSE CVE-2024-47748
In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: assign irq bypass producer token correctly We used to call irqbypassunregisterproducer in vhostvdpasetupvqirq which is problematic as we don't know if the token pointer is still valid or not. Actually, we use the...
DEBIAN-CVE-2024-47724
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...
CVE-2024-47708 netkit: Assign missing bpf_net_context
In the Linux kernel, the following vulnerability has been resolved: netkit: Assign missing bpfnetcontext During the introduction of struct bpfnetcontext handling for XDP-redirect, the netkit driver has been missed, which also requires it because NETKITREDIRECT invokes skbdoredirect which is...
Privilege Escalation
github.com/authzed/spicedb is vulnerable to Privilege Escalation. The vulnerability is due to a bug in the LookupResources2 feature, where requests with caveats in the evaluation path may return a CONDITIONAL permissionship with missing context, even when the context was provided...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from call tracing due to the use of thiscpuadd in a preemptible context...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an illegitimate context call caused by sleeping in an atomic context at shutdown...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from call tracing caused by the use of thiscpuadd in a preemptible context...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing bpfnetcontext assignment in the netkit driver, which could cause the kernel to crash...
CVE-2024-41714
A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 9.8.1.5 and MiVoice Business Solution Virtual Instance MiVB SVI through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful...
Mitel MiCollab 代码注入漏洞
Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. An input validation error vulnerability exists in Mitel MiColla, which can be exploited by an attacker to execute arbitrary commands on the syst...
PT-2024-11859 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the damon sysfs set schemes function. The issue arises from an incorrect assumption that the DAMON context would not...
Malicious code in context-async-hooks (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9570 Malicious code in context-async-hooks (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2024-32431 · F5 · Big-Iq
Name of the Vulnerable Software and Affected Versions: BIG-IQ versions prior to 8.2.0.1 BIG-IQ versions prior to 8.3.0 Description: A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility. This issue allows an attacker with the Administrat...
F5 BIG-IQ 安全漏洞
F5 BIG-IQ is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery and network services across public and private clouds, traditional data centers and hybrid environments. A security vulnerability exists in F5 BIG-IQ that stems from a...
Microsoft Exchange PowerShell Unsafe Reflection NTLM Relay Vulnerability
This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the PowerShell endpoint. The process does not properly restrict a user-supplied argument...
CVE-2024-46742
...
Microsoft Exchange ApprovedApplication Exposed Dangerous Method NTLM Relay Vulnerability
This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the ApprovedApplication class. The issue results from an exposed dangerous method. An...
GO-2024-3200 SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not in github.com/authzed/spicedb
SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not in github.com/authzed/spicedb...