Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mlocked flag in the mm component not being cleared during the freepagesprepare phase, resulting in pages...

PT-2025-3609

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The Linux kernel has a vulnerability that can cause an infinite loop in the throttle direct reclaim function. This issue arises from the zone reclaimable pages function, which does not account...

Imagination GPU Driver security vulnerabilities

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from software installed and run as an unprivileged user may make improper GPU system calls, which could allow unauthorized access to arbitrary physical memory...

WS-2023-0015

CakePHP vulnerable to Cross-site Scripting in some development error pages...

CVE-2024-11981

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

CVE-2024-11981 Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

CVE-2024-11981 Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

CVE-2024-11981

CVE-2024-11981 affects Billion Electric routers (e.g., M100, M150, M120N, M500). The vulnerability is an authentication bypass that allows unauthenticated attackers to retrieve contents of arbitrary web pages. Public details in multiple sources confirm the issue and affected models. No explicit r...

PT-2024-8935

Name of the Vulnerable Software and Affected Versions: Billion M100 versions affected versions not specified Billion M150 versions affected versions not specified Billion M120N versions affected versions not specified Billion M500 versions affected versions not specified Description: The issue is...

CVE-2024-11981: Authentication Bypass Using an Alternate Path or Channel

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

PT-2024-9655 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 11.4.7 and earlier Adobe Connect version 12.6 Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to execute arbitrary code. This is a reflected Cross-Site...

CVE-2024-33610

"sessionlist.html" and "systrayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides logged-in users' session information including session cookies, and "systrayentryreboot.html" allows to reboot the device. As for the details of affected product names, model number...

Foxit PDF Reader Use After Free Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of Doc objects. Exploiting this vulnerability can allow ...

PT-2024-35634

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-next-20241118-syzkaller Description The issue is related to the io uring feature in the Linux kernel, where the io pin pages function does not properly check for overflows. The uaddr parameter of io pin...

PT-2024-35699

Name of the Vulnerable Software and Affected Versions SvelteKit versions prior to 2.8.3 Description Unsanitized input from the request URL flows into end, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack XSS. The files...

[SECURITY] Fedora 41 Update: php-8.3.14-1.fc41

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

Astra Linux – Vulnerability in Chromium

In DevTools in Google Chrome before version 126.0.6478.182, it was possible for an attacker to convince a user to install a malicious extension, allowing them to inject scripts or HTML into a privileged page through a crafted Chrome Extension. Chromium security severity: High...

OESA-2024-2449 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mm: call the securitymmapfile LSM hook in remapfilepages The remapfilepages syscall handler calls dommap directly, which doesn't contain the LSM security check...

AZL-54598 CVE-2024-53094 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...

DEBIAN-CVE-2024-53094

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...