32 matches found
EUVD-2024-47381
Malicious code in bioql PyPI...
EUVD-2024-28331
Malicious code in bioql PyPI...
EUVD-2025-2618
Malicious code in bioql PyPI...
CVE-2023-1093
The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers IdP, which could allow attackers to make logged in admins delete all IdP via a CSRF attack...
CVE-2024-6259
BT: HCI: advextreport Improper discarding in advextreport...
CVE-2022-48946 udf: Fix preallocation discarding at indirect extent boundary
In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udfdeleteaext for deleting...
CVE-2024-6259
BT: HCI: advextreport Improper discarding in advextreport...
CVE-2024-6259
BT: HCI: advextreport Improper discarding in advextreport...
CVE-2024-6259 BT: HCI: adv_ext_report Improper discarding in adv_ext_report
BT: HCI: advextreport Improper discarding in advextreport...
CVE-2024-6259 BT: HCI: adv_ext_report Improper discarding in adv_ext_report
BT: HCI: advextreport Improper discarding in advextreport...
PT-2024-37490
Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The Bluetooth HCI has an issue with improper discarding in adv ext report. This issue affects the Bluetooth protocol. There is no information available about the estimated number of...
CVE-2024-35873
In the Linux kernel, the following vulnerability has been resolved: riscv: Fix vector state restore in rtsigreturn The RISC-V Vector specification states in "Appendix D: Calling Convention for Vector State" 1 that "Executing a system call causes all caller-saved vector registers v0-v31, vl, vtype...
UBUNTU-CVE-2024-35915
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncidevup and ncintfpacket syzbot reported the following uninit-value access issue 12: ncirxwork parses and processes received packet. When the payload length is zero, each message type handler reads...
GSD-2023-1001500 udf: Fix preallocation discarding at indirect extent boundary
udf: Fix preallocation discarding at indirect extent boundary This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...
GSD-2023-1000001 udf: Fix preallocation discarding at indirect extent boundary
udf: Fix preallocation discarding at indirect extent boundary This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.15 by commit...
PT-2023-33902 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.15 Description: The issue concerns a problem with preallocation discarding at indirect extent boundary. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...
httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...
httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...
httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...