8474 matches found
UEFI BIOS Unauthorized Access
The vulnerability of UEFI BIOS in Huawei’s personal computers is related to improper access control. Exploiting this vulnerability can allow a hacker to gain unauthorized access to arbitrary functions...
EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2024-1696)
According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to...
FortiSandbox Threat Detection Configuration Modification
The vulnerability of the FortiSandbox threat detection and mitigation system is related to the implementation of security functions at the client side. Exploiting this vulnerability could allow a malicious actor to modify the device’s configuration...
Linux kernel dm-rq function Data Compromise
The vulnerabilities of the functions dmmqinitrequestqueue and dmmqcleanupmappeddevice in the Linux kernel’s drivers/md/dm-rq.c file are related to the repeated release of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality,...
BIT-GOLANG-2024-24788 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Rocky Linux 9 : postgresql (RLSA-2024:0951)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:0951 advisory. - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer...
SUSE SLES12 Security Update : go1.22 (SUSE-SU-2024:1573-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1573-1 advisory. Update to go1.22.3: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin bsc1224017 - CVE-2024-24788: net: hig...
AZL-40517 CVE-2024-24788 affecting package golang for versions less than 1.22.3
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
AZL-98589 CVE-2024-24788 affecting package golang 1.27.1-1
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
AZL-40375 CVE-2024-24788 affecting package golang for versions less than 1.22.3-1
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
UBUNTU-CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788 Malformed DNS message can cause infinite loop in net
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop , potentially leading to a Denial of Service. This vulnerability is identified with CWE-835 (Loop with Unreachable Exit Condition). While specific software versions are not detailed in t...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop...
Improper Access Control
gradio is vulnerable to Improper Access Control . The vulnerability is due to improper validation of the isserverfn attribute for functions. This allows attackers to execute functions that should be restricted, potentially leading to unauthorized actions or access to sensitive data...