Lucene search
K

11198 matches found

SUSE CVE
SUSE CVE
added 2024/05/28 3:32 a.m.2 views

SUSE CVE-2021-47524

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

4.7CVSS6.2AI score0.00017EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2024/05/27 11:3 a.m.15 views

CVE-2021-47524

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

2.7CVSS6.5AI score0.00017EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.1 views

The vulnerability of the api_pluginhook() function in the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the apipluginhook function in the lib/plugin.php file of the Cacti network monitoring software is related to authentication errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS8.4AI score0.01844EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.1 views

The vulnerability of the OpenSSL cryptographic library, related to resource release errors, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL cryptographic library is related to the use of the non-standard SSLOPNOTICKET option, which allows session cache to grow indefinitely. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.9CVSS6.5AI score0.08833EPSS
Exploits0References11Affected Software6
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.2 views

PT-2024-40090 · Silverstripe · Silverstripe

Name of the Vulnerable Software and Affected Versions: SilverStripe versions prior to 4.x Description: The issue allows unauthorized users to expose information typically hidden in production environments, such as verbose errors and debugging tools, by accessing certain URL parameters. This is...

6.5CVSS7.1AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.1 views

PT-2024-40248 · Unknown · Silverstripe

Name of the Vulnerable Software and Affected Versions: Silverstripe affected versions not specified Description: The issue concerns a user ID enumeration vulnerability in brute force error messages. Specifically, the system previously handled login attempts for non-existent and existing users...

5.3CVSS6.9AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/05/27 12:0 a.m.1 views

PT-2024-40294 · Packagist · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Software affected versions not specified Description: The issue concerns a user ID enumeration vulnerability in brute force error messages. It allows an attacker to infer or confirm user details...

5.3CVSS6.8AI score
Exploits0References5
OSV
OSV
added 2024/05/24 6:52 p.m.19 views

GHSA-CW5R-JX8R-9F7X Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

5.3CVSS4.7AI score0.00126EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/05/24 6:52 p.m.62 views

Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...

4.3CVSS6.6AI score0.00126EPSS
Exploits0References4Affected Software1
F5 Networks
F5 Networks
added 2024/05/24 5:8 p.m.61 views

K000139764: Apache HTTPD vulnerability CVE-2023-38709

Security Advisory Description Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58. CVE-2023-38709 Impact This vulnerability allows malicious or exploitable...

7.3CVSS7.3AI score0.04358EPSS
Exploits0Affected Software15
OSV
OSV
added 2024/05/24 3:15 p.m.3 views

DEBIAN-CVE-2021-47561

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect data on the I2C bus and/or memory corruptions in the guest since the device can still be operating on the buffers it was given while the guest...

7.8CVSS6.2AI score0.00036EPSS
Exploits0References1
OSV
OSV
added 2024/05/24 3:15 p.m.2 views

DEBIAN-CVE-2021-47524

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

5.5CVSS4.9AI score0.00017EPSS
Exploits0References1
OSV
OSV
added 2024/05/24 3:15 p.m.0 views

UBUNTU-CVE-2021-47561

In the Linux kernel, the following vulnerability has been resolved: i2c: virtio: disable timeout handling If a timeout is hit, it can result is incorrect data on the I2C bus and/or memory corruptions in the guest since the device can still be operating on the buffers it was given while the guest...

7.8CVSS6.5AI score0.00036EPSS
Exploits0References5
OSV
OSV
added 2024/05/24 3:15 p.m.0 views

UBUNTU-CVE-2021-47524

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

5.5CVSS5.7AI score0.00017EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2024/05/24 3:15 p.m.9 views

CVE-2021-47524

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

5.5CVSS5.8AI score0.00017EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/05/24 3:9 p.m.15 views

CVE-2021-47524 serial: liteuart: fix minor-number leak on probe errors

In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors...

6.4AI score0.00017EPSS
Exploits0References2
CVE
CVE
added 2024/05/24 3:9 p.m.72 views

CVE-2021-47524

CVE-2021-47524 : In the Linux kernel, the serial driver (liteuart) leaked a minor number on probe errors. The fix ensures the allocated minor number is released before returning from probe errors. This entry is tied to kernel versions affected by the liteuart minor-number leak and has been resolv...

5.5CVSS6.7AI score0.00017EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/05/24 2:15 p.m.11 views

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

4.3CVSS5.1AI score0.00126EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/24 1:46 p.m.25 views

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

6.7AI score0.00126EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/24 1:46 p.m.12 views

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

6.3AI score0.00126EPSS
Exploits0References2
Rows per page
Query Builder