Lucene search
K

7 matches found

OSV
OSV
added 2026/01/25 2:36 p.m.4 views

CVE-2026-23010 ipv6: Fix use-after-free in inet6_addr_del().

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6addrdel. syzbot reported use-after-free of inet6ifaddr in inet6addrdel. 0 The cited commit accidentally moved ipv6deladdr for mngtmpaddr before reading its ifp-flags for temporary addresses in...

7.8CVSS5.3AI score0.00011EPSS
Exploits0References8
OSV
OSV
added 2025/12/04 11:15 p.m.1 views

CVE-2025-14051

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

8.8CVSS5.5AI score
Exploits0References7
Cvelist
Cvelist
added 2025/12/04 10:32 p.m.22 views

CVE-2025-14051 youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

6.5CVSS0.00056EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/12/04 10:32 p.m.2 views

CVE-2025-14051 youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

6.5CVSS6.3AI score0.00056EPSS
Exploits1References7
RedHat Linux
RedHat Linux
added 2024/08/15 5:34 a.m.2 views

kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

This CVE addresses a race condition in the Linux kernel's IPv6 subsystem, specifically between the ipv6getifaddr and ipv6deladdr functions. This race condition can lead to use-after-free scenarios, potentially causing system instability or crashes...

5.5CVSS7.3AI score0.00008EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.1 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

9.8CVSS6.1AI score0.00337EPSS
Exploits1References2
CNVD
CNVD
added 2020/03/26 12:0 a.m.1 views

Logic Flaw Vulnerability in Liangjing Mall Online Shop Shopping System (CNVD-2020-27282)

Liangjing Mall online shopping system is a set of multi-functional online store system that can fit different types of goods and is super flexible. A logic flaw exists in LiangJing Mall Online Shop System, which can be exploited by an attacker to delete the address information of an entire site...

6.5AI score
Exploits0
Rows per page
Query Builder