468 matches found
CVE-2024-55656
CVE-2024-55656 (RedisBloom Integer Overflow) affects RedisBloom module used with Redis. The vulnerability occurs in CMS.INITBYDIM when allocating memory for a Count-Min Sketch using user-supplied width/depth, allowing heap memory under-allocation, leading to out-of-bounds read (OOB read) and writ...
PT-2025-30818
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Squashfs filesystem handling. A Syzkaller report identified a “shift-out-of-bounds” bug occurring when mounting a Squashfs filesystem...
DEBIAN-CVE-2024-53065
In the Linux kernel, the following vulnerability has been resolved: mm/slab: fix warning caused by duplicate kmemcache creation in kmembucketscreate Commit b035f5a6d852 "mm: slab: reduce the kmalloc minimum alignment if DMA bouncing possible" reduced ARCHKMALLOCMINALIGN to 8 on arm64. However, wi...
kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()
A race condition was found in the Linux kernel's net/bluetooth device driver within the conninfomin,maxageset function. This issue can lead to an integrity overflow issue, potentially disrupting Bluetooth connections or facilitating a denial of service attack...
kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set()
A race condition was found in the Linux kernel's net/bluetooth device driver within the conninfomin,maxageset function. This issue can lead to an integrity overflow issue, potentially disrupting Bluetooth connections or facilitating a denial of service attack...
SUSE CVE-2024-49888
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 0000 1 PREEMPT SMP KASAN PTI The failure is due to the below signed divide:...
The vulnerability of the macro-defined ARCH_DMA_MINALIGN in the Linux operating system on the PA-RISC platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the macro definition ARCHDMAMINALIGN in the arch/parisc/include/asm/cache.h file of the Linux operating system’s kernel on the PA-RISC platform is related to incorrect object placement in the cache. Exploiting this vulnerability could allow an attacker to compromise the...
kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
A vulnerability was found in the Linux kernel's hwmon subsystem, specifically in the mlxreg-fan driver. The issue arises when the driver’s sysfs interface for controlling fan speed does not properly handle cases where the requested minimum fan speed exceeds the maximum allowable value. When the...
kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
A vulnerability was found in the Linux kernel's hwmon subsystem, specifically in the mlxreg-fan driver. The issue arises when the driver’s sysfs interface for controlling fan speed does not properly handle cases where the requested minimum fan speed exceeds the maximum allowable value. When the...
SUSE CVE-2024-42066
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo-pagealignment to u64 before bit-shifting to prevent overflow when assigning to minpagesize...
UBUNTU-CVE-2024-42066
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast tbo-pagealignment to u64 before bit-shifting to prevent overflow when assigning to minpagesize...
PT-2025-3137 · Redis · Redisbloom
Name of the Vulnerable Software and Affected Versions: RedisBloom versions prior to 2.2.19 RedisBloom versions prior to 2.4.12 RedisBloom versions prior to 2.6.14 RedisBloom versions prior to 2.8.2 Description: There is an integer overflow vulnerability in RedisBloom, a module used in Redis. This...
The vulnerability of the set_min_max function in Linux kernel allows attackers to increase their privileges.
The vulnerability of the setminmax function in Linux kernel relates to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
SUSE CVE-2024-41003
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsetminmax corruption of fakereg Juan reported that after doing some changes to buzzer 0 and implementing a new fuzzing strategy guided by coverage, they noticed the following in one of the probes: ... 13: 79 r6 = u64 ...
DEBIAN-CVE-2024-41003
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsetminmax corruption of fakereg Juan reported that after doing some changes to buzzer 0 and implementing a new fuzzing strategy guided by coverage, they noticed the following in one of the probes: ... 13: 79 r6 = u64 ...
SUSE CVE-2024-37356
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...
DEBIAN-CVE-2024-37356
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcpupdatealpha. In dctcpupdatealpha, we use a module parameter dctcpshiftg as follows: alpha -= minnotzeroalpha, alpha dctcpshiftg; ... deliveredce /sys/module/tcpdctcp/parameters/dctcpshiftg cat...
Exploit for SQL Injection in Vanquish Woocommerce_Customers_Manager
CVE-2024-0399 - WooCommerce Customers Manager 29.4 - Post-Auth...
CVE-2024-33949 WordPress Min and Max Purchase for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vark Min and Max Purchase for WooCommerce allows Stored XSS.This issue affects Min and Max Purchase for WooCommerce: from n/a through 2.0.0...