Lucene search
+L

8662 matches found

OSV
OSV
added 2024/11/19 2:16 a.m.15 views

AZL-53721 CVE-2024-50267 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The "devdbg&urb-dev-dev, ..." which happens after usbfreeurburb is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid...

7.8CVSS6.8AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/19 2:16 a.m.2 views

DEBIAN-CVE-2024-50267

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The "devdbg&urb-dev-dev, ..." which happens after usbfreeurburb is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid...

7.8CVSS5.6AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/19 2:16 a.m.15 views

UBUNTU-CVE-2024-50267

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The "devdbg&urb-dev-dev, ..." which happens after usbfreeurburb is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid...

7.8CVSS6.2AI score0.00284EPSS
SaveExploits0References48
Cvelist
Cvelist
added 2024/11/19 1:30 a.m.44 views

CVE-2024-50267 USB: serial: io_edgeport: fix use after free in debug printk

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The "devdbg&urb-dev-dev, ..." which happens after usbfreeurburb is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid...

7.8CVSS0.00284EPSS
SaveExploits0References8
OSV
OSV
added 2024/11/19 1:30 a.m.16 views

CVE-2024-50267 USB: serial: io_edgeport: fix use after free in debug printk

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: fix use after free in debug printk The "devdbg&urb-dev-dev, ..." which happens after usbfreeurburb is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid...

7.8CVSS6.4AI score
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.9 views

Vulnerability of the sched/debug components of the Linux operating system’s kernel, allowing attackers to access confidential information

The vulnerability of the sched/debug components in the Linux operating system’s kernel is related to the disclosure of information through the updatescheddomain Debugfs function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

3.3CVSS6.2AI score0.00237EPSS
SaveExploits0References12Affected Software3
NVD
NVD
added 2024/11/16 10:15 p.m.15 views

CVE-2024-52416

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through = 2.2...

10CVSS0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/16 9:14 p.m.15 views

CVE-2024-52416 WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through = 2.2...

10CVSS5.2AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/16 9:14 p.m.25 views

CVE-2024-52416 WordPress Debug Tool plugin <= 2.2 - Remote Code Execution vulnerability

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through = 2.2...

10CVSS0.00445EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/16 9:14 p.m.63 views

CVE-2024-52416

CVE-2024-52416 affects the WordPress Debug Tool plugin, vulnerable in versions n/a through 2.2 due to missing authorization checks and file type validation, enabling unauthenticated attackers to upload a web shell and potentially achieve remote code execution. The issue is associated with the dbt...

10CVSS5.9AI score0.00445EPSS
SaveIn wildExploits0References1
CNNVD
CNNVD
added 2024/11/16 12:0 a.m.11 views

WordPress plugin Debug Tool 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

10CVSS6.5AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/16 12:0 a.m.12 views

PT-2024-35256 · Unknown · Eugen Bobrowski Debug Tool

Name of the Vulnerable Software and Affected Versions: Eugen Bobrowski Debug Tool versions n/a through 2.2 Description: The issue is related to a Missing Authorization vulnerability in the Eugen Bobrowski Debug Tool, which allows an attacker to upload a web shell to a web server. Recommendations:...

10CVSS7AI score0.00445EPSS
SaveExploits0References7
NVD
NVD
added 2024/11/15 9:15 p.m.28 views

CVE-2024-11217

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

4.9CVSS0.00361EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/15 8:48 p.m.104 views

CVE-2024-11217

CVE-2024-11217 affects the OAuth-server (including oauth-server-container). The vulnerability causes the OAuth2 client secret to be logged when the logLevel is set to Debug or higher for OIDC/GitHub/GitLab/Google IDP logins. Impact is exposure of OAuth2 client secrets via logs (confidentiality ri...

4.9CVSS5.1AI score0.00361EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/15 8:48 p.m.26 views

CVE-2024-11217 Oauth-server-container: oauth-server-container logs client secret in debug level

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

4.9CVSS6.9AI score0.00361EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/15 8:48 p.m.40 views

CVE-2024-11217 Oauth-server-container: oauth-server-container logs client secret in debug level

A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug higher for OIDC/GitHub/GitLab/Google IDPs login options...

4.9CVSS0.00361EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/15 4:15 p.m.29 views

CVE-2022-20649

A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container. This vulnerability exists because the debug mode is incorrectly enabled...

8.1CVSS0.11636EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/15 4:15 p.m.23 views

CVE-2022-20648

A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform debug actions that could result in the disclosure of confidential information that should be restricted. This vulnerability exists because of a debug service that...

5.3CVSS0.00985EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/15 3:59 p.m.14 views

CVE-2022-20648 Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability

A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform debug actions that could result in the disclosure of confidential information that should be restricted. This vulnerability exists because of a debug service that...

5.3CVSS6.7AI score0.00985EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/15 3:59 p.m.30 views

CVE-2022-20648 Cisco Redundancy Configuration Manager Debug Information Disclosure Vulnerability

A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform debug actions that could result in the disclosure of confidential information that should be restricted. This vulnerability exists because of a debug service that...

5.3CVSS0.00985EPSS
SaveExploits0References3
Rows per page
Query Builder