2104 matches found
Amazon Linux 2 : bind (ALAS-2024-2625)
The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2625 advisory. The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problem...
The vulnerability of the i40e component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the i40e component in the Linux operating system is related to the improper release of the client instance, followed by the removal of the i40e module. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-38175
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network...
CVE-2024-38175 Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability
...
Microsoft Azure Managed Instance for Apache Cassandra 访问控制错误漏洞
Microsoft Azure Managed Instance for Apache Cassandra is an Azure Managed Instance for Apache Cassandra is a service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Managed Instance for Apache Cassandra that stems from the presence of improper acces...
UBUNTU-CVE-2024-43831
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Handle invalid decoder vsi Handle an invalid decoder vsi in vpudecinit to ensure the decoder vsi is valid for future use...
kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: acquire rcureadlock in instancedestroyrcu syzbot reported that nfreinject could be called without rcureadlock : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a 0 Not tainted...
kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: acquire rcureadlock in instancedestroyrcu syzbot reported that nfreinject could be called without rcureadlock : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a 0 Not tainted...
CVE-2024-7492
CVE-2024-7492 affects the MainWP Child Reports WordPress plugin. The WordPress vulnerability is a Cross-Site Request Forgery in all versions up to 2.2, caused by missing or incorrect nonce validation in network_options_action(), enabling unauthenticated attackers to update arbitrary options on mu...
CVE-2024-7492 MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
The MainWP Child Reports plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the networkoptionsaction function. This makes it possible for unauthenticated attackers to update arbitrary...
CVE-2024-4353 Stored XSS in Generate Board Name Input Field
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...
XWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet
Impact Any user with edit right on any page can perform arbitrary remote code execution by adding instances of XWiki.SearchSuggestConfig and XWiki.SearchSuggestSourceClass to their user profile or any other page. This compromises the confidentiality, integrity and availability of the whole XWiki...
CVE-2024-37281
Kibana has a Denial of Service vulnerability CVE-2024-37281 where a user with the Viewer role can crash a Kibana instance by issuing a high volume of crafted requests to a specific endpoint. Affected ranges include Kibana 8.x before 8.14.0 and 7.x before 7.17.23. Root cause details are not fully ...
Discourse 安全漏洞
Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email, and chat room features. A security vulnerability exists in Discourse that stems from the fact that writing requests that submit very long tag group names may reduce the...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the need for instance variables to be symbolic in error handling...
BIT-DISCOURSE-2024-38360 Denial of service via Watched Words in Discourse
Discourse is an open source platform for community discussion. In affected versions by creating replacement words with an almost unlimited number of characters, a moderator can reduce the availability of a Discourse instance. This issue has been addressed in stable version 3.2.3 and in current...
How to Configure SQL Instances in XenMobile Server with custom port
This article provides information on how to install XenMobile Server XMS 10 to be configured on a SQL Instance with the custom port. Prerequisites Knowledge of SQL service accountcredentials with the appropriate role. Knowledge of SQL Server FQDN or IP. Knowledge of custom port for the SQL instan...
CVE-2024-39528
A Use After Free vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a Denial of Service DoS.On all Junos OS and Junos Evolved platforms, if a routing-instance deactivation is triggered, and at...
CVE-2024-39528
CVE-2024-39528 — AUse After Free in Juniper Junos OS/Junos OS Evolved Routing Protocol Daemon (rpd) causes a segmentation fault on a specific sequence (routing-instance deactivation + SNMP request), leading to rpd crash and DoS. Affected: Junos OS and Junos OS Evolved. Reported vulnerable version...
