184 matches found
CVE-2024-51808
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pat O'Brien codeSnips codesnips allows Stored XSS.This issue affects codeSnips: from n/a through = 1.2...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2023-42233
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the Filter/FilterEditor function...
CVE-2023-42231
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can delete admin users by sending a request to the "WSCView/Delete" function...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42228
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Incorrect Access Control. Low privileged users can edit their own ACL rules by sending a request to the "AclList/SaveAclRules" administrative function...
CVE-2023-42230
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...
CVE-2023-42229
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service...
AZL-69551 CVE-2025-22090 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...
UBUNTU-CVE-2025-22090
In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...
CVE-2025-22090
In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VMPAT handling when fork fails in copypagerange If trackpfncopy fails, we already added the dst VMA to the maple tree. As fork fails, we'll cleanup the maple tree, and stumble over the dst VMA for which we neither...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of VMPAT on fork failure in copypagerange, which could lead to a resource leak...
SUSE-SU-2025:20177-1 Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c bsc1237363. - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c bsc1237370. - CVE-2025-27113:...
PT-2025-16730
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc5+ Description A vulnerability in the Linux kernel has been resolved, related to the handling of VM PAT when fork fails in copy page range. If track pfn copy fails, the dst VMA is added to the maple tree...
Medium: expat
Issue Overview: An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an unstarted parser. CVE-2024-50602 Affected Packages: expat Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...