231584 matches found
CVE-2021-46945
CVE-2021-46945 concerns the Linux kernel ext4 filesystem. The vulnerability causes a kernel panic when the filesystem is mounted with errors=panic, prior to a specific commit. After the patch 014c9caa29d3, remounting a filesystem with abort no longer panics, and the behavior is restored to what i...
CVE-2021-46946
CVE-2021-46946 is rejected/not used; this CVE ID is not an active vulnerability entry.
CVE-2021-46944
CVE-2021-46944 : Linux kernel vulnerability in media: staging/intel-ipu3 where a memory reference leak in imu_fmt occurs due to misordered checks; patch fixes memory leak by changing check order. Impact limited to memory leak; no exploitation details provided in the documents. Remediation: apply ...
CVE-2024-1722
CVE-2024-1722 describes a Denial of Service condition in Keycloak where, under certain conditions, an unauthenticated remote attacker could block other accounts from logging in. The connected advisories (GHSA-CQ42-VHV7-XR7P and OSV/GHSA mirrors) specify this as a DoS via account lockout, with a c...
Information disclosure
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 macOS, Windows before build 37391...
Information disclosure
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Cross site scripting
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Sql injection
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...
Cross site scripting
Stored cross-site scripting XSS vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Cross site scripting
Self cross-site scripting XSS vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Cross site scripting
In the module "So Flexibilite" soflexibilite from Common-Services for PrestaShop 4.1.26, a guest authenticated customer can perform Cross Site Scripting XSS injection...
Input validation
Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages...
CVE-2024-1926
CVE-2024-1926 affects SourceCodester Free and Open Source Inventory Management System 1.0. The vulnerability is a SQL injection in the file /app/ajax/search_sales_report.php triggered by manipulating the customer parameter, with remote exploitation possible. Public disclosure exists. Impact is hi...
CVE-2023-48682
CVE-2023-48682 is a stored XSS in the unit name of Acronis Cyber Protect 16 (Linux/Windows) prior to build 37391. The vulnerability is due to unsanitized unit-name input, with impact limited to higher-risk confidentiality and integrity in some disclosures, and no availability impact. A fixed vers...
CVE-2023-48681
Acronis Cyber Protect 16 (Linux, Windows) before build 37391 has a self XSS vulnerability in the storage nodes search field. The issue allows execution of malicious scripts in the app context. Mitigation: upgrade to build 37391 or later; as a temporary workaround, restrict access to the storage n...
CVE-2023-50380
CVE-2023-50380 describes an XML External Entity (XXE) injection in Apache Ambari (affecting versions ≤ 2.7.7) due to improper input validation in the Oozie Workflow Scheduler. The issue could allow reading arbitrary server files (root-level) and may enable privilege escalation from low-privilege ...
CVE-2023-48680
CVE-2023-48680 affects Acronis Cyber Protect 16 (macOS, Windows) prior to build 37391. The issue is an information disclosure caused by excessive collection of system information. Impact is information disclosure with confidentiality impact (per CVSS) and is described as a local issue. Remediatio...
CVE-2023-48679
CVE-2023-48679 affects Acronis Cyber Protect 16 (Linux/Windows) prior to build 37391. The vulnerability is a stored cross-site scripting (XSS) caused by missing origin validation in postMessage. The PT-2024-13620 entry confirms the affected versions and identifies the root cause as lack of origin...
CVE-2024-21742
CVE-2024-21742: IBM/connected IBM products show a vulnerability due to improper input validation in MIME4J DOM, enabling header injection in MIME messages. Affected: IBM API Connect v12 OnPrem 12.1.0.0 (per IBM bulletin); remediation: upgrade to 12.1.0.1. Other IBM docs also reference this CVE in...