AZL-53304 CVE-2024-50257 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

DEBIAN-CVE-2024-50257

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

UBUNTU-CVE-2024-50257

In the Linux kernel, the following vulnerability has been resolved: netfilter: Fix use-after-free in getinfo ip6tablenat module unload has refcnt warning for UAF. call trace is: WARNING: CPU: 1 PID: 379 at kernel/module/main.c:853 moduleput+0x6f/0x80 Modules linked in: ip6tablenat- CPU: 1 UID: 0...

PT-2024-30294

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A deadlock may occur in the Linux kernel due to the i3c master register function acquiring the &i3cbus-lock twice. This can happen when the i3c device get info function is called, which can lea...

PT-2024-8931

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: The issue is related to a use-after-free vulnerability in the get info function of the Linux kernel's netfilter component. This vulnerability can be triggered by concurrent execution of modul...

PT-2024-32288

Name of the Vulnerable Software and Affected Versions MFASOFT Secure Authentication Server SAS versions 1.8.x through 1.9.x before 1.9.040924 Description An improper access control vulnerability in the "/api-selfportal/get-info-token-properties" endpoint allows remote attackers to gain access to...

CVE-2024-46937: Authorization Bypass Through User-Controlled Key

An improper access control IDOR vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server SAS 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the...

CVE-2024-46937

An improper access control IDOR vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server SAS 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the...

UBUNTU-CVE-2021-47097

In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantechchangereportid The array param in elantechchangereportid must be at least 3 bytes, because elantechreadregparams is calling ps2command with PSMOUSECMDGETINFO, that is goi...

NethServer nethserver-phonenehome SQL注入漏洞

nethserver-phonenehome is an open source application for NethServer. It is used to track all NethServer installations worldwide. NethServer nethserver-phonenehome suffers from a SQL injection vulnerability that originates from a security issue in the function getinfo/getcountrycoor in the file...

PT-2023-12417 · Unknown · Nethserver

Name of the Vulnerable Software and Affected Versions: NethServer phonenehome affected versions not specified Description: A critical issue affects the function get info/get country coor of the file server/index.php, leading to sql injection. Recommendations: Apply a patch to fix this issue. As a...

Debian DSA-5211-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5211 advisory. - An out-of-bounds write issue was addressed with improved input validation. CVE-2022-32792 - The issue was addressed with improved UI handling. CVE-2022-32816 No...

PT-2025-8275

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue described Description A vulnerability has been identified in the Linux kernel related to the bpf arm64 component. The issue arises when the bpf prog get info by fd...

CVE-2022-27571

Heap-based buffer overflow vulnerability in sheifdgetinfoimage function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...

PT-2022-18492

Name of the Vulnerable Software and Affected Versions libsimba library versions prior to SMR Apr-2022 Release 1 Description The issue is related to a heap-based buffer overflow vulnerability in the sheifd get info image function. This vulnerability allows code execution by a remote attacker...

AZL-6574 CVE-2021-3573 affecting package kernel for versions less than 5.10.78.1-1

A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...

PT-2019-6290 · Intel +7 · Edk Ii +7

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: A heap overflow issue exists in the LzmaUefiDecompressGetInfo function. This issue can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of...

Flexense Disk Pulse Enterprise Control Protocol Denial of Service Vulnerability

Flexense Disk Pulse Enterprise is a suite of disk monitoring tools from Flexense Canada, with Control Protocol as one of the control protocols. A denial of service vulnerability exists in Control Protocol in Flexense Disk Pulse Enterprise version 10.1.18. The vulnerability can be exploited to cau...

CVE-2017-15665

In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 8094...

CVE-2017-15664

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9121...