7704 matches found
PT-2024-7582
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to an off-by-one error in the sd read block characteristics function. If a device returns page 0xb1 with a length of 8, this function may attempt an out-of-bounds memory...
PT-2024-32739
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to an off-by-one error in the ep93xx div recalc rate function, which can lead to an out-of-bounds read. The psc-div array has psc-num div elements, and the condition should...
CVE-2024-6910
The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
PT-2024-6983
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the CMA heap fault handler in the dma-buf: heaps component of the Linux kernel. This error allowed obtaining a mapping larger than the buff...
OESA-2024-2091 syslinux security update
Security Fixes: The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the...
mvm Component DoS
The vulnerability of the mvm component in the Linux operating system’s kernel is related to the use of the command line parameter “debugfs=off”. The mvm iwiwifi module uses an invalid pointer to debugfsdir and causes a NULL pointer dereferencing error in the kernel. Exploiting this vulnerability...
rsyslog Long Tag Off-By-Two Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'rsyslog Long Tag Off-By-Two DoS', 'Description' = %q This module triggers an off-by-two overflow in the rsyslog daemon. This flaw is unlikely to...
UBUNTU-CVE-2024-45440
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...
SUSE CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...
Ivanti Avalanche < 6.4.4 Multiple Vulnerabilities
The version of Ivanti Avalanche running on the remote host is prior to 6.4.4. It is, therefore, is affected by multiple vulnerabilities : - An off-by-one error in WLInfoRailService allows a remote unauthenticated attacker to crash the service. CVE-2024-36136 - Improper input validation in the...
DEBIAN-CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...
UBUNTU-CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...
UBUNTU-CVE-2022-48922
In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The tracehardirqson,off require the caller to setup frame pointer properly. This because these two functions use macro 'CALLERADDR1' aka. builtinreturnaddress1 to acquire caller...
CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...
PT-2024-6175 · Vim +3 · Vim +3
Name of the Vulnerable Software and Affected Versions: Vim versions prior to v9.1.0689 Description: The issue is related to a buffer overflow in the Vim text editor. When the search-count message is disabled and right-left mode is enabled, the search pattern is reversed and allocated in a new...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to check the debugfsdir pointer before using it, resulting in a null pointer dereference when...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tracehardirqson,off function not setting the frame pointer correctly...
DRUPAL-CONTRIB-2024-030
This module integrates the mmenu library with Drupal's menu system with the aim of having an off-canvas mobile menu and a horizontal menu at wider widths. The module doesn't respect custom node access restrictions implemented through hook\ENTITY\TYPE\access hooks meaning the titles of restricted...
GO-2022-0550 Off-by-one Error in v2fly/v2ray-core in github.com/v2fly/v2ray-core
Off-by-one Error in v2fly/v2ray-core in github.com/v2fly/v2ray-core...
ASD’s ACSC, CISA, FBI, and NSA, with the support of International Partners Release Best Practices for Event Logging and Threat Detection
Today, the Australian Signals Directorate’s Australian Cyber Security Centre ASD’s ACSC, CISA, FBI, NSA, and international partners are releasing Best Practices for Event Logging and Threat Detectionlink is external. This guide will assist organizations in defining a baseline for event logging to...