Lucene search
+L

546 matches found

OSV
OSV
added 2024/07/05 7:15 p.m.7 views

CVE-2024-39019

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...

5.4CVSS5.8AI score0.00195EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/05 7:15 a.m.14 views

UBUNTU-CVE-2024-39485

In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifierentry of a notifier is not re-initialised after unregistering the notifier. This leads to dangling pointers being left there so use listdelinit to...

5.5CVSS6.1AI score0.00213EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
added 2024/07/05 12:0 a.m.14 views

CVE-2024-39019

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...

7.5AI score0.00195EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/05 12:0 a.m.26 views

CVE-2024-39019

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...

0.00195EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/07/01 12:0 a.m.10 views

The vulnerability of the del_timer() function in the Linux operating system allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the deltimer function in the Linux operating system’s kernel is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure or have other adverse effects...

7.8CVSS7.2AI score0.00251EPSS
SaveExploits1References31Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/06/27 12:0 a.m.7 views

The vulnerability of the idxd_wq_del_cdev() function in the drivers/dma/idxd/cdev.c file of the Linux operating system allows a hacker to gain increased privileges.

The vulnerability of the idxdwqdelcdev function in the drivers/dma/idxd/cdev.c file of Linux operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

8.8CVSS6.6AI score0.00233EPSS
SaveExploits0References20Affected Software3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:39 p.m.3 views

Malicious code in down_load_ebook_los_signos_del_zodiaco_y_su_caracter_by_linda_goodman_7d0if (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:39 p.m.7 views

MAL-2024-2197 Malicious code in down_load_ebook_los_signos_del_zodiaco_y_su_caracter_by_linda_goodman_7d0if (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/06/06 7:15 p.m.10 views

CVE-2024-2362

A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows platform. Due to improper validation of file paths between Windows and Linux environments, an attacker can exploit this vulnerability to delete any file on the system. The issue arises from the lack of...

9.1CVSS6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.10 views

PT-2024-19975 · Unknown · Parisneo/Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version 9.3 Description: A path traversal vulnerability exists due to improper validation of file paths between Windows and Linux environments, allowing an attacker to delete any file on the system. The issue arises from...

9.1CVSS9.3AI score0.0115EPSS
SaveExploits1References6
OSV
OSV
added 2024/06/05 7:15 p.m.7 views

CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

8.8CVSS5.8AI score0.00289EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/06/05 12:0 a.m.7 views

PT-2024-27111 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the admin/type deal.php component, specifically via the mudi=del parameter. This allows for unauthorized actions to be performed. Recommendations: F...

8.8CVSS6.8AI score0.0023EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2024/05/28 3:32 a.m.4 views

SUSE CVE-2021-47506

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've called vfssetlease. A delegation break runs a callback which immediately in nfsd4cbrecallprepare adds the delegation to delrecalllru...

7CVSS7.8AI score0.0026EPSS
SaveExploits0References17
OSV
OSV
added 2024/05/24 3:15 p.m.3 views

DEBIAN-CVE-2021-47512

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: prevent dismantle issue For some reason, fqpiedestroy did not copy working code from piedestroy and other qdiscs, thus causing elusive bug. Before calling deltimersync&q-adapttimer, we need to ensure timer will...

5.5CVSS5.1AI score0.00236EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/05/23 3:55 p.m.4 views

SUSE CVE-2021-47357

In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in iamoduleexit This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running afte...

6.4CVSS6.7AI score0.00247EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2024/05/23 3:4 a.m.3 views

SUSE CVE-2021-47321

In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free by calling deltimersync This driver's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running...

6.4CVSS6.5AI score0.00247EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2024/05/23 3:4 a.m.6 views

SUSE CVE-2021-47324

In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdtstartup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the...

7CVSS6.5AI score0.0116EPSS
SaveExploits0References11
OSV
OSV
added 2024/05/21 3:15 p.m.5 views

DEBIAN-CVE-2021-47357

In the Linux kernel, the following vulnerability has been resolved: atm: iphase: fix possible use-after-free in iamoduleexit This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running afte...

7.8CVSS5.6AI score0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/21 3:15 p.m.5 views

DEBIAN-CVE-2021-47355

In the Linux kernel, the following vulnerability has been resolved: atm: nicstar: Fix possible use-after-free in nicstarcleanup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running...

7.8CVSS5.6AI score0.00247EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/21 3:15 p.m.1 views

DEBIAN-CVE-2021-47324

In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdtstartup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the...

8.8CVSS5.3AI score0.0116EPSS
SaveExploits0References1
Rows per page
Query Builder