9971 matches found
PT-2025-3501 · Monetdb · Monetdb Server
Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the exp copy component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider restricting the use of...
MonetDB SQL注入漏洞
MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A SQL injection vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the expcopy component. An attacker exploiting this vulnerability could cause a denial ...
The vulnerability of the Framework component of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...
Virtuoso Open-Source Edition 安全漏洞
Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which ste...
SUSE CVE-2024-51729
In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copyusergiganticpage In current kernel, hugetlbwp calls copyuserlargefolio with the fault address. Where the fault address may be not aligned with the huge page size. Then, copyuserlargefolio may call...
SUSE CVE-2024-57875
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
The vulnerability of the formSetLog function (/goform/formSetLog) in D-Link DIR-619L router software allows a intruder to trigger a service failure.
The vulnerability of the formSetLog /goform/formSetLog function in D-Link DIR-619L router microprogramming software lies in the copying of buffers without checking the size of input data when processing the curTime parameter. Exploiting this vulnerability can allow an attacker to cause service...
DEBIAN-CVE-2024-57875
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
AZL-68570 CVE-2024-57875 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...
CVE-2024-51729
In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copyusergiganticpage In current kernel, hugetlbwp calls copyuserlargefolio with the fault address. Where the fault address may be not aligned with the huge page size. Then, copyuserlargefolio may call...
DEBIAN-CVE-2024-51729
In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copyusergiganticpage In current kernel, hugetlbwp calls copyuserlargefolio with the fault address. Where the fault address may be not aligned with the huge page size. Then, copyuserlargefolio may call...
CVE-2024-55916 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel's ringbuffer is fully initialized, we can hit the panic below: hvutils: Registering HyperV Utility Drive...
CVE-2024-51729
Technical details for CVE-2024-51729 are not provided in the connected documents. The supplied items reference a kernel fix at a high level but do not enumerate affected products/versions beyond generic kernel context; monitor for updates.
SUSE CVE-2024-56654
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix using rcureadunlock while iterating The usage of rcureadunlock while inside listforeachentryrcu is not safe since for the most part entries fetched this way shall be treated as rcudereference: Note that t...
SUSE CVE-2024-56675
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpfprog/attachment RCU flavors Uprobes always use bpfprogrunarrayuprobe under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF...
The vulnerability of the `dc_state_create_copy()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dcstatecreatecopy function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
SUSE CVE-2024-56759
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfscowblock, and we have the tracepoint tracebtrfscowblock enabled and preemption is also enabled CONFIGPREEMPT=y, we can...
UBUNTU-CVE-2024-56759
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and tracing is enabled When a COWing a tree block, at btrfscowblock, and we have the tracepoint tracebtrfscowblock enabled and preemption is also enabled CONFIGPREEMPT=y, we can...
