1166 matches found
CVE-2021-40289
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
CVE-2021-40289
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
Cross site scripting
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
MM-Wiki 跨站脚本漏洞
MM-Wiki is phachon individual developers of a lightweight enterprise knowledge sharing and team collaboration software. It can be used to quickly build enterprise Wiki and team knowledge sharing platform. MM-Wiki v0.2.1 version of a security vulnerability , the vulnerability stems from the...
CVE-2021-40289
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
CVE-2021-40289
CVE-2021-40289 affects mm-wki/mm-wiki v0.2.1 with a Cross-Site Scripting (XSS) flaw. The issue arises from insufficient input sanitization on the create-new-space page, enabling script execution via user-provided data. CVSSv3.1 metrics show a Network attack vector, Low attack complexity, No privi...
CVE-2021-40289
mm-wki v0.2.1 is vulnerable to Cross Site Scripting XSS...
PT-2022-11211 · Mm-Wiki · Mm-Wiki
Name of the Vulnerable Software and Affected Versions: mm-wki version 0.2.1 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's session. ...
CVE-2022-41222
A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code in how a race condition happens between rmap walk and mremap. This flaw allows a local user to crash or potentially escalate their privileges on the system...
Design/Logic Flaw
A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver Handler. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to...
CVE-2022-3523
CVE-2022-3523 (Linux kernel) is addressed in MiracleLinux AXSA-2023-7038: the issue is a use-after-free in mm/memory.c during memory fault handling (memory manager race on private device pages). The Nessus/Miracle advisory lists this as one of multiple kernel CVEs affected on kernel 5.14.x builds...
CVE-2022-42703
A memory leak flaw with use-after-free capability was found in the Linux kernel. The VMA mm/rmap.c functionality in the ismergeableanonvma function continuously forks, using memory operations to trigger an incorrect reuse of leaf anonvma. This issue allows a local attacker to crash the system...
DEBIAN-CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
UBUNTU-CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
GSD-2022-1006607 mm/slub: fix to return errno if kmalloc() fails
mm/slub: fix to return errno if kmalloc fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.260 by commit...
GSD-2022-1006483 mm/slab_common: fix possible double free of kmem_cache
mm/slabcommon: fix possible double free of kmemcache This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0 by commit...
CVE-2022-42703
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse...
GSD-2022-1005434 mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
mm/hugetlb: avoid corrupting page-mapping in hugetlbmcopyatomicpte This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...
GSD-2022-1005069 mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW
mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...