Lucene search
+L

7572 matches found

Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-34636

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 through Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

9.8CVSS7.6AI score0.00682EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.12 views

PT-2025-34624 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: An integer overflow vulnerability exists in the GDF parsing functionality. A specially crafted GDF file can lead to arbitrary code execution. An attacker can provide a malicious...

9.8CVSS7AI score0.0068EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.8 views

PT-2025-34639 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

9.8CVSS7.4AI score0.00682EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-34633

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A heap-based buffer overflow exists in the Nex parsing functionality. A specially crafted .nex file can lead to arbitrary code execution. An attacker can provide a malicious fil...

9.8CVSS7.5AI score0.00738EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.11 views

PT-2025-34645 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 3.9.0 and Master Branch 35a819fa Description: A stack-based buffer overflow vulnerability exists in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. The vulnerability...

9.8CVSS7.2AI score0.00682EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2024/12/29 2:41 p.m.20 views

CVE-2024-56562

A vulnerability was found in the i3cmasterputi3caddrs function in the Linux kernel's i3c driver. A memory management issue can occur due to a copy-paste error between "dynaddr" and "initdynaddr", which leads to incorrect handling of memory, potentially causing resource mismanagement and instabili...

4.4CVSS6.4AI score0.00227EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/12/28 3:48 a.m.5 views

SUSE CVE-2024-56562

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

5.5CVSS7.8AI score0.00227EPSS
SaveExploits0References17
OSV
OSV
added 2024/12/27 3:15 p.m.1 views

DEBIAN-CVE-2024-56562

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

5.5CVSS5.5AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/27 3:15 p.m.15 views

CVE-2024-56562

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

5.5CVSS0.00227EPSS
SaveExploits0References9
OSV
OSV
added 2024/12/27 3:15 p.m.5 views

UBUNTU-CVE-2024-56562

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

5.5CVSS6.1AI score0.00227EPSS
SaveExploits0References46
Cvelist
Cvelist
added 2024/12/27 2:23 p.m.25 views

CVE-2024-56562 i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

0.00227EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/12/27 2:23 p.m.14 views

CVE-2024-56562

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs if dev-boardinfo && dev-boardinfo-initdynaddr ^^^ here check "initdynaddr" i3cbussetaddrslotstatus&master-bus, dev-info.dynaddr, ... ^^^^ free "dynaddr" Fix copy/past...

5.5CVSS5.5AI score0.00227EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/12/27 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from not properly releasing dynamic addresses in the i3cmasterputi3caddrs function in the i3c module...

5.5CVSS6.4AI score0.00227EPSS
SaveExploits0References7
Schneier on Security
Schneier on Security
added 2024/12/19 3:24 p.m.13 views

Mailbox Insecurity

It turns out that all cluster mailboxes in the Denver area have the same master key. So if someone robs a postal carrier, they can open any mailbox. I get that a single master key makes the whole system easier, but it's very fragile security...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.8 views

PT-2024-41060 · Fyrox · Fyrox

Name of the Vulnerable Software and Affected Versions: Fyrox versions prior to the latest version on the master branch Description: The issue arises from the transmute vec as bytes API, which incorrectly assumes that any generic type T has a stable layout. This can lead to uninitialized memory...

7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.8 views

CVE-2023-37984

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 8.1.10...

4.3CVSS5.8AI score0.00462EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/13 3:15 p.m.12 views

CVE-2023-37984

Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 8.1.10...

4.3CVSS0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:23 p.m.20 views

CVE-2023-37984 WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 8.1.10...

4.3CVSS7.3AI score0.00462EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.22 views

CVE-2023-37984 WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ExpressTech Quiz And Survey Master allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 8.1.10...

4.3CVSS0.00462EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:23 p.m.52 views

CVE-2023-37984

CVE-2023-37984 is a Missing Authorization vulnerability affecting the WordPress plugin Quiz And Survey Master (aka Quiz Master Next) up to version 8.1.10. The root cause is broken access control due to an incorrectly configured access control security level, enabling unauthorized actions when pro...

4.3CVSS8AI score0.00462EPSS
SaveExploits0References1
Rows per page
Query Builder