4139 matches found
CVE-2024-57792
CVE-2024-57792 is a Linux kernel vulnerability in the power: supply: gpio-charger path. The issue arises when the lowest charge current limit is forced to be > 0 and a requested limit falls below this, causing an index calculation that can access memory beyond the allocated memory. It has been...
PT-2025-8998
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock situation exists in the Linux kernel due to the queue freeze vs limits lock order in sysfs store methods. This issue arises when a user attempts to modify a limit,...
CVE-2024-43064: Allocation of Resources Without Limits or Throttling
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU...
CVE-2022-49035: Allocation of Resources Without Limits or Throttling
In the Linux kernel, the following vulnerability has been resolved: media: s5pcec: limit msg.len to CECMAXMSGSIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case...
PT-2025-37329
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The blk stack limits function in the Linux kernel contained a potential integer overflow when checking the chunk sectors value. The function checks if the chunk sectors value, calculat...
PT-2026-4472
Name of the Vulnerable Software and Affected Versions docopt.cpp version 0.6.2 Description A signed integer overflow exists in the LeafPattern::match function within docopt private.h of docopt.cpp. This occurs when merging occurrence counters, specifically when a default value of LONG MAX is...
SimplCommerce 安全漏洞
SimplCommerce is SimplCommerce open source a simple, cross-platform, modular e-commerce system built on . A security vulnerability exists in SimplCommerce. An attacker could exploit the vulnerability to bypass inventory limits and submit simultaneous purchase requests for the same product from...
Apache Tomcat 9.0.0-M1 < 9.0.98 Multiple Vulnerabilities
The version of Apache Tomcat installed on the remote host is 9.0.0-M1 to 9.0.97, 10.1.0-M1 to 10.1.33 or 11.0.0-M1 to 11.0.1. It is, therefore, affected by multiple vulnerabilities : - The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 11.0.2 or later, users...
CVE-2024-12672
Rockwell Automation Arena® contains use-after-free and out-of-bounds write vulnerabilities in processing DOE files, allowing a threat actor to achieve arbitrary code execution when a legitimate user runs crafted DOE content. The issues originate from improper memory handling in the affected code ...
WhoDB Allows Unbounded Memory Consumption in Authentication Middleware Can Lead to Denial of Service
Summary A Denial of Service DoS vulnerability in the authentication middleware allows any client to cause memory exhaustion by sending large request bodies. The server reads the entire request body into memory without size limits, creating multiple copies during processing, which can lead to Out ...
Dell RecoverPoint Brute Force
The vulnerability of the Dell RecoverPoint data protection software for virtual machines relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...
CVE-2024-54677
A flaw was found in the "examples" web application of Apache Tomcat. Numerous examples within that application did not place limits on uploaded data. This vulnerability can potentially trigger an out-of-memory OOM error, leading to a denial of service...
CVE-2024-54315
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.2...
php: 1-byte array overrun in common path resolve code
A vulnerability was found in PHP. This security issue occurs because the core path resolution function allocates a buffer one byte small. Resolving paths with lengths close to the system MAXPATHLEN setting may lead to the byte after the allocated buffer being overwritten with a NULL value, which...
Fixed in Apache Tomcat 9.0.98
Important: Remote Code Execution via write enabled Default Servlet. Mitigation for CVE-2024-50379 was incomplete - CVE-2024-56337 The previous mitigation for CVE-2024-50379 was incomplete. In addition to upgrading to 9.0.98 or later, users running Tomcat on a case insensitive file system with the...
CVE-2024-11149
In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...
CVE-2024-11149
OpenBSD 7.4 prior to errata 014 contains a vulnerability in vmm(4) where the GDTR limits were not properly restored on Intel (VMX) CPUs. The issue affects the vmm subsystem, specifically the GDTR handling in the virtual machine monitor, leading to potential misbehavior on affected Intel VMX hosts...
CVE-2024-11149
In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...
