6051 matches found
PT-2024-4034 · Unknown · Php-Svg-Lib
Name of the Vulnerable Software and Affected Versions: php-svg-lib versions prior to 0.5.2 Description: The issue is related to the failure of php-svg-lib to validate that the font-family does not contain a PHAR url, which may lead to remote code execution RCE on PHP versions less than 8.0...
CVE-2024-24386
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder...
CVE-2024-24386: Improper Access Control
An issue in VitalPBX v.3.2.4-5 allows an attacker to execute arbitrary code via a crafted payload to the /var/lib/vitalpbx/scripts folder...
CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
CVE-2024-25165
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
CVE-2024-25165: Buffer Copy without Checking Size of Input
A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex...
The vulnerability of the cpStripToTile() function (tools/tiffcp.c) in the LibTIFF library, which is related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a service failure.
The vulnerability of the cpStripToTile function tools/tiffcp.c in the LibTIFF library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12150)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12150 advisory. - sched/rt: picknextrtentity: check listentry Pietro Borrello Orabug: 35181559 CVE-2023-1077 - net/sched: schhfsc: Ensure inner classes have fsc curve...
Exploit for Improper Access Control in Vitalpbx
VitalPBX - CVE-2024-24386 Vulnerability Title: Command Inject...
OESA-2024-1145 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-510)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-510 advisory. A flaw has been found in Xen. An unprivileged guest can cause Denial of Service DoS of the host by sending network packets to the backend, causing the backend to crash. CVE-2023-46838 A Null...
PT-2024-20534 · Crafatar · Crafatar
Name of the Vulnerable Software and Affected Versions: Crafatar versions prior to 2.1.5 Description: Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the lib/public/ directory can be requested from the server. Instances running behind...
Security Bulletin: Vulnerability with Kernel and Lib cURL affect IBM Cloud Object Storage Systems (Jan 2024v1)
Summary Vulnerability with Kernel - CVE-2023-5717, CVE-2023-3772, CVE-2023-39194, CVE-2023-39192, CVE-2023-46219, CVE-2023-39193, CVE-2023-45863, CVE-2023-1206, & CVE-2023-4208 and Lib cURL CVE-2023-46218 This vulnerability have been addressed in the latest ClevOS releases Vulnerability Details...
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.8, <=2.9), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2024-23899 via org.jenkins-ci.plugins:git-server (1.7)
org.jenkins-ci.plugins:git-server MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.8, =2.9 -...
Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
...
SUSE CVE-2024-22563
openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc in openvswitch-2.17.8/lib/util.c...
The vulnerability of the ida_free() function in the lib/idr.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the idafree function in the lib/idr.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Fedora 38 : kernel (2024-c4ec5006e3)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c4ec5006e3 advisory. The 6.6.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...