Lucene search
K

14 matches found

OSV
OSV
added 2026/04/29 9:49 p.m.1 views

GHSA-RH3W-4CCX-PRF9 Admidio has Inverted 2FA Reset Authorization Check that Lets Group Leaders Strip Admin TOTP

Summary A logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin users cannot remove their own TOTP configuration, but they can remove other users' TOTP, including administrators. A group leader with profile edit rights on an admin account can strip th...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/29 9:49 p.m.6 views

Admidio has Inverted 2FA Reset Authorization Check that Lets Group Leaders Strip Admin TOTP

Summary A logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin users cannot remove their own TOTP configuration, but they can remove other users' TOTP, including administrators. A group leader with profile edit rights on an admin account can strip th...

7.1CVSS5.4AI score0.00025EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/12/15 7:37 p.m.1 views

GO-2025-4205 Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik

Traefik Inverted TLS Verification Logic in ingress-nginx Provider in github.com/traefik/traefik...

5.9CVSS6.8AI score0.00012EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2024/05/28 3:1 p.m.2 views

SUSE CVE-2023-52706

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

5.5CVSS6.5AI score0.00107EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/05/23 11:9 a.m.20 views

CVE-2023-52706

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

4.4CVSS6.4AI score0.00107EPSS
Exploits0References4
OSV
OSV
added 2024/05/21 4:15 p.m.1 views

DEBIAN-CVE-2023-52706

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

5.5CVSS4.9AI score0.00107EPSS
Exploits0References1
OSV
OSV
added 2024/05/21 4:15 p.m.1 views

UBUNTU-CVE-2023-52706

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

5.5CVSS5.7AI score0.00107EPSS
Exploits0References5
OSV
OSV
added 2024/05/21 3:22 p.m.11 views

CVE-2023-52706 gpio: sim: fix a memory leak

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

5.5CVSS4.5AI score0.00107EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/05/21 3:22 p.m.17 views

CVE-2023-52706

In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpiosimremovehogs that leads to GPIO hog structures never being freed...

5.5CVSS4.7AI score0.00107EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/02/17 12:0 a.m.2 views

PT-2023-9771 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the Linux kernel's sim component, specifically in the gpio sim remove hogs function. This is due to an inverted logic bug that prevents GPIO ho...

5.5CVSS6.5AI score0.00107EPSS
Exploits0References21
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.1 views

SUSE CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

2.1CVSS6.2AI score0.00169EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2014/11/26 12:0 a.m.51 views

OracleVM 2.1 : kernel (OVMSA-2009-0004)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2008-3528 The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that...

7.1CVSS5.8AI score0.01482EPSS
Exploits8References9
OSV
OSV
added 2009/05/02 12:0 a.m.59 views

DSA-1787-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

10CVSS6.4AI score0.15492EPSS
Exploits30
NVD
NVD
added 2009/02/22 10:30 p.m.21 views

CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

2.1CVSS7AI score0.00169EPSS
Exploits1References27
Rows per page
Query Builder