2101 matches found
kernel: memory leak in ipv6_renew_options()
A memory leak flaw was found in the Linux kernel’s IPv6 functionality in how a user triggers the setsockopt of the IPV6ADDRFORM and IPV6DSTOPTS type. This flaw allows a user to crash the system if the setsockopt function is being called simultaneously with the IPV6ADDRFORM type and other processe...
kernel: cgroup: Use separate src/dst nodes when preloading css_sets for migration
In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for a migration, we need to hold the source and destination csets to...
kernel: memory leak in ipv6_renew_options()
A memory leak flaw was found in the Linux kernel’s IPv6 functionality in how a user triggers the setsockopt of the IPV6ADDRFORM and IPV6DSTOPTS type. This flaw allows a user to crash the system if the setsockopt function is being called simultaneously with the IPV6ADDRFORM type and other processe...
kernel: memory leak in ipv6_renew_options()
A memory leak flaw was found in the Linux kernel’s IPv6 functionality in how a user triggers the setsockopt of the IPV6ADDRFORM and IPV6DSTOPTS type. This flaw allows a user to crash the system if the setsockopt function is being called simultaneously with the IPV6ADDRFORM type and other processe...
CVE-2023-2520
A vulnerability was found in Caton Prime 2.1.2.51.e8d7225049202303031001 and classified as critical. This issue affects some unknown processing of the file cgi-bin/toolsping.cgi?action=Command of the component Ping Handler. The manipulation of the argument Destination leads to command injection...
Caton Technology Prime 命令注入漏洞
Caton Technology Prime is a powerful and versatile switchable encoder and decoder from Caton Technology, China. A command injection vulnerability exists in Caton Technology Prime version 2.1.2.51.e8d7225049 202303031001, which stems from the fact that incorrect manipulation of the parameter...
PT-2023-19976 · Unknown · Caton Prime
Name of the Vulnerable Software and Affected Versions: Caton Prime version 2.1.2.51.e8d7225049202303031001 Description: A critical issue affects the Ping Handler component, specifically the file "cgi-bin/tools ping.cgi?action=Command", where manipulation of the Destination argument leads to comma...
PT-2023-12982 · Onos · Onos
Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in ONOS where modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. This improper handling of such an intent is...
PT-2023-12984 · Onos · Onos
Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in ONOS where an intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading ...
Open Networking Foundation ONOS 安全漏洞
Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which stems from Intents with the same source and...
K000133517: OpenSSH vulnerability CVE-2023-28531
Security Advisory Description ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9. CVE-2023-28531 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory...
CVE-2022-33228
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header...
destination-surf.com Cross Site Scripting vulnerability OBB-3259710
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Authentication flaw
Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface. When the device can be accessed over the network an attacker could bypass authentication. This would allow an attacker to : - Change the password, resulting in a DOS of the users - Change the streaming...
CVE-2023-0750 Yellowbrik PEC-1864 authentication bypass
Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface. When the device can be accessed over the network an attacker could bypass authentication. This would allow an attacker to : - Change the password, resulting in a DOS of the users - Change the streaming...
PT-2023-13249 · Qualcomm · Snapdragon +12
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to information disclosure due to a buffer over-read in a modem. This occurs when the modem processes an IPv6 packet that contains either a hop-by-hop or destination...
Hitachi Vantara Pentaho Business Analytics Server 安全漏洞
Hitachi Vantara Pentaho Business Analytics Server is a modern data blending, integration, and business analytics platform from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server that originates from displaying the destination path on...
Design/Logic Flaw
MindsDB is an open source machine learning platform. An unsafe extraction is being performed using shutil.unpackarchive from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. This vulnerability is sometimes called a TarSlip or a ZipSlip...
CVE-2023-28531
A vulnerability was found in openssh. This issue occurs when adding smartcard keys to ssh-agent1 with per-hop destination constraints. A logic error prevented the constraints from being communicated to the agent, resulting in the keys being added without constraints. The common cases of...