Linux kernel hns3 DoS

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to errors in reading beyond the boundary in the hns3getcoalinfo function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-36957

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A potential out-of-bound access issue has been identified in the Linux kernel, specifically in the fill frame info function. This issue can be triggered by sending a packet with 14 bytes,...

CVE-2020-12492

Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive information...

PT-2024-35784

Name of the Vulnerable Software and Affected Versions masterstack imgcap version 0.0.1 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/submit" endpoint. Recommendations For masterstack imgcap version 0.0.1, as a temporary workaround, consider...

CVE-2024-11229

creationtimestamp| type| source ---|---|--- 2024-11-23 11:42:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113532087565057168...

Astra Linux – Vulnerability in curl

Libcurl’s ASN1 parser code includes the GTime2str function, which is used to parse an ASN.1 Generalized Time field. If a syntactically incorrect field is provided, the parser may end up using -1 as the length of the time fraction. This causes a strlen operation to be performed on a pointer to a...

CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

SUSE CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

D-Link DI-8400 Router Arbitrary Command Execution

The vulnerability of the mspinfohtm function in D-Link DI-8400 router microprogramming software is related to the lack of measures taken to neutralize special elements used in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands when processing the flag a...

DEBIAN-CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-53092

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-53092 virtio_pci: Fix admin vq cleanup by using correct info pointer

In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...

CVE-2024-51151

D-Link DI-8200 16.07.26A1 is vulnerable to remote command execution in the mspinfohtm function via the flag parameter and cmd parameter...

D-Link DI-8200 security vulnerabilities

The D-Link DI-8200 is an enterprise router from China-based AUO D-Link. The D-Link DI-8200 suffers from a command injection vulnerability that stems from a remote command execution vulnerability in the flag parameter and cmd parameter of the mspinfohtm function. No details of the vulnerability ar...

CVE-2018-9482

In intrdatacopycb of btifhd.cc, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2024-52303

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each...

CVE-2018-9467

creationtimestamp| type| source ---|---|--- 2024-11-20 02:02:33+00:00| seen| https://t.me/cvedetector/11555 2026-06-21 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosdipjdv22m...

PT-2024-16744 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a rejected CVE candidate due to an error, with all references and descriptions...

PT-2024-8579 · D Link · D-Link Di-8400

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8400 version 16.07.26A1 Description: The issue is related to the msp info htm function in the D-LINK DI-8400 router's firmware, which does not properly neutralize special elements used in a command. This can be exploited by a remote...

PT-2024-35281 · Unknown · Quick Learn

Name of the Vulnerable Software and Affected Versions: Quick Learn versions n/a through 1.0.1 Description: The issue is related to an Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution', which allows Object Injection. This is a type of...