8306 matches found
CVE-2023-53555 mm/damon/core: initialize damo_filter->list from damos_new_filter()
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damofilter-list from damosnewfilter damosnewfilter is not initializing the list field of newly allocated filter object. However, DAMON sysfs interface and DAMONRECLAIM are not initializing it after calli...
CVE-2023-53555
CVE-2023-53555 relates to the Linux kernel (Damon/DAMON subsystem). The issue: in damos_new_filter(), the newly allocated filter object’s list field was not initialized, and the sysfs DAMON interface and DAMON_RECLAIM path did not reinitialize it after calling damos_new_filter(). This allowed acc...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized list field of a newly allocated filter object in the damosnewfilter function, which could...
CVE-2025-10692
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-32372
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2023-31217
Malicious code in bioql PyPI...
EUVD-2025-26471
Malicious code in bioql PyPI...
EUVD-2025-21930
Malicious code in bioql PyPI...
EUVD-2022-4577
Malicious code in bioql PyPI...
EUVD-2022-38873
Malicious code in bioql PyPI...
EUVD-2023-23397
Malicious code in bioql PyPI...
EUVD-2025-21919
Malicious code in bioql PyPI...
EUVD-2025-1950
Malicious code in bioql PyPI...
EUVD-2022-2049
Malicious code in bioql PyPI...
EUVD-2024-52446
Malicious code in bioql PyPI...
EUVD-2023-50445
Malicious code in bioql PyPI...
EUVD-2022-47877
Malicious code in bioql PyPI...