17766 matches found
CVE-2021-47378
A vulnerability was found in the Linux kernel's nvme-rdma driver where the driver failed to destroy a component cmid before another component qp was destroyed. This issue occurs when the kernel incorrectly manages memory during RDMA, leading to a potential use-after-free. Mitigation Red Hat has...
Attacks, Vulnerabilities and Actors 13 to 19 May 2024
...
Achieve Security Compliance with Wazuh File Integrity Monitoring
File Integrity Monitoring FIM is an IT security control that monitors and detects file changes in computer systems. It helps organizations audit important files and system configurations by routinely scanning and verifying their integrity. Most information security standards mandate the use of FI...
CVE-2024-34949
A SQL injection vulnerability exists in Likeshop versions prior to 2.5.7 . The root cause is the OrderLogic::getOrderList function, which allows an attacker to execute arbitrary SQL commands. This vulnerability can be exploited via the /admin/order/lists.html endpoint. Impacted users are encourag...
CVE-2024-35874
A vulnerability was found in the Linux kernel that causes a NULL pointer dereference in the aiocomplete function during a wakeup operation. The issue arises because finishwait may skip locking if it encounters an empty list head. This leads to a NULL pointer dereference when attempting a wakeup...
CVE-2024-35993
In the Linux kernel, the following vulnerability has been resolved: mm: turn foliotesthugetlb into a PageType The current foliotesthugetlb can be fooled by a concurrent folio split into returning true for a folio which has never belonged to hugetlbfs. This can't happen if the caller holds a...
CVE-2024-35961
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal FW error during probe, the driver will report the error to user via devlink. This will trigger a WARNON, since mlx5 is calling devlinkregist...
CVE-2024-32047 CyberPower PowerPanel business Active Debug Code
Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server...
The vulnerability of the ipv6_mc_down() function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ipv6mcdown function in the net/ipv6/mcast.c module of the Linux operating system’s IPv6 kernel implementation is related to resource competition race conditions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...
CVE-2024-34687
SAP NetWeaver Application Server for ABAP and ABAP Platform do not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. An attacker can control code that is executed within a user’s browser, which could result in modification, deletion of data, includin...
CVE-2024-32624
HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Trefmemsetnull in H5Tref.c called from H5Tconvref in H5Tconv.c, resulting in the corruption of the instruction pointer...