1775 matches found
CVE-2024-4610: Use After Free
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0;...
CVE-2023-48745
Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha Code: from n/a through 2.9...
CVE-2023-48745 WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability
Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha Code: from n/a through 2.9...
CVE-2023-48745 WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability
Improper Restriction of Excessive Authentication Attempts vulnerability in WebFactory Ltd Captcha Code allows Functionality Bypass.This issue affects Captcha Code: from n/a through 2.9...
Elevation of Privilege Vulnerability in Galaxy Kirin Operating System by Kirin Software Co.
Kirin Software Ltd. is a company that builds secure and innovative operating system products and corresponding solutions for general-purpose and specialized domains. An elevation of privilege vulnerability exists in Kirin Software's Galaxy Kirin operating system, which can be exploited by attacke...
CVE-2021-47441 mlxsw: thermal: Fix out-of-bounds memory accesses
In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: cat /sys/class/thermal/thermalzone2/cdev0/type mlxswfan cat...
CVE-2024-34947
The IK-Q3000 router from Quanxun Huiju Network Technology (Beijing) Co.,Ltd version 3.7.10 x64 Build202401261655 is vulnerable to an ICMP redirect attack . This issue involves an Incorrectly Specified Destination in a Communication Channel (CWE-941). The vulnerability is assigned a CRITICAL base ...
CVE-2024-36006 mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix incorrect list API usage Both the function that migrates all the chunks within a region and the function that migrates all the entries within a chunk call listfirstentry on the respective lists without...
CVE-2024-34948: Undefined Security Weakness
An issue in Quanxun Huiju Network TechnologyBeijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to cause a Denial of Service DoS when attempting to make TCP connections...
CVE-2024-34947: Incorrectly Specified Destination in a Communication Channel
Quanxun Huiju Network Technology Beijing Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 was discovered to be vulnerable to an ICMP redirect attack...
CVE-2024-35853
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...
CVE-2024-35855
CVE-2024-35855 : Linux kernel issue in mlxsw spectrum_acl_tcam caused a local use-after-free during activity update. The bug happens when the rule activity update traverses configured rules and reads ventry->entry, which can be concurrently changed by the rehash path. The fix closes the race b...
CVE-2024-35853 mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...
CVE-2024-35853 mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks all the filters with the same priority in the region and in each...
CVE-2024-35853
A memory leak exists in the Linux kernel within the mlxsw: spectrum_acl_tcam component during the rehash operation. The issue occurs because the code fails to verify if a backup chunk is NULL when a rollback of a failed migration is attempted, causing the backup chunk to be overwritten and leaked...
CVE-2023-23990
Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0...
CVE-2023-23990 WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0...
CVE-2023-23990 WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability
Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0...
CVE-2023-23990
CVE-2023-23990 : WordPress plugin “Redirection for Contact Form 7” (wpcf7-redirect) has an improper Privilege Management vulnerability that enables Privilege Escalation. Affected versions are
File Upload Vulnerability in MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Co. Ltd (CNVD-2024-24693)
Beijing Metsoft Technology Co., Ltd. is a professional customer relationship management software provider. A file upload vulnerability exists in the MetaCRM6 customer relationship management system of Beijing Meta Software Technology Co. Ltd, which can be exploited by an attacker to gain control ...