DEBIAN-CVE-2022-49022

In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211getrateduration Fix possible out-of-bound access in ieee80211getrateduration routine as reported by the following UBSAN report: UBSAN: array-index-out-of-bounds in...

UBUNTU-CVE-2022-49022

In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211getrateduration Fix possible out-of-bound access in ieee80211getrateduration routine as reported by the following UBSAN report: UBSAN: array-index-out-of-bounds in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an out-of-bounds access issue contained in the ieee80211getrateduration function in the wifi driver...

Moderate: Red Hat Security Advisory: Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9

Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

PT-2026-60941

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.0.4 Description An uncaught exception handling issue exists in the parser error rendering code when processing empty strings. Authorized clients can trigger a server crash by executing malformed queries that attem...

The vulnerability of the Aardvark-dns DNS server lies in its uncontrolled resource consumption during open TCP connections that are not time-limited. This allows attackers to cause service failures.

The vulnerability of the Aardvark-dns DNS server is related to an uncontrolled resource consumption during open TCP connections with unlimited duration. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerabilities of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitchManager local management platform allow a perpetrator to gain unauthorized access to the device.

The vulnerability of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitchManager local management platform are related to incorrect session duration settings. Exploiting this vulnerability can allow a remote attacker to gain...

PT-2024-30131 · Unknown · Kashipara Bus Ticket Reservation System

Name of the Vulnerable Software and Affected Versions: Kashipara Bus Ticket Reservation System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin schedule.php" endpoint, allowing remote attackers to execute arbitrary code via the scheduleDurationPHP paramete...

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to incorrect session expiration times, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity in JetBrains is related to incorrect session duration settings. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the GLPI system’s request and incident handling capabilities, related to insufficient session duration, allows attackers to compromise the integrity of the system.

The vulnerability of the GLPI system for handling requests and incidents is related to insufficient session duration. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the system...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to incorrect session duration settings. This allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to incorrect session duration settings. Exploiting this vulnerability can allow attackers to gain unauthorized access to the device...

The vulnerability of the Zenml framework for creating machine learning pipelines, related to the incorrect validity period of a session, allows attackers to bypass the authentication process.

The vulnerability of the Zenml machine learning pipeline creation framework is related to an incorrect session duration. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

CVE-2024-34799 WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability

Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82...

CVE-2024-34799 WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability

Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82...

OESA-2024-1703 libldb security update

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases. Security Fixes: MaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670...

[SECURITY] Fedora 39 Update: rust-uu_sleep-0.0.23-3.fc39

sleep uutils pause for DURATION...

Fedora: Security Advisory for rust-uu_sleep (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-uu_sleep-0.0.23-3.fc40

sleep uutils pause for DURATION...

WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability

Appointment Duration Manipulation vulnerability discovered by Mochamad Sofyan Patchstack Alliance in WordPress Plugin BookingPress versions = 1.0.82...

The vulnerability of the Reverse Proxy Server of Containous Traefik, related to insufficient processing of exceptional states, allows a hacker to trigger a service failure.

The vulnerability of the Reverse Proxy server Containous Traefik is related to insufficient handling of exceptional states during the processing of the Content-Length header. This occurs due to an incorrect setting of the read request duration parameter. Exploiting this vulnerability allows a...