9 matches found
kernel: net: use dst_dev_rcu() in sk_setup_caps()
In the Linux kernel, the following vulnerability has been resolved: net: use dstdevrcu in sksetupcaps Use RCU to protect accesses to dst-dev from sksetupcaps and skdstgsomaxsize. Also use dstdevrcu in ip6dstmtumaybeforward, and ipdstmtumaybeforward. ip4dsthoplimit can use dstdevnetrcu...
CVE-2026-32910
...
EUVD-2024-0727
Malicious code in bioql PyPI...
PT-2025-2014 · WordPress · Social Share Buttons
Name of the Vulnerable Software and Affected Versions: Social Share Buttons for WordPress versions 2.7 and earlier Description: The issue allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded. Recommendations: For Social Share Buttons for WordPress...
CVE-2024-25620
Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected directory based on the...
CVE-2024-25620
CVE-2024-25620 – Helm path traversal vulnerability : The connected Nessus entry confirms a concrete issue in Helm where saving a chart with a relative path in Chart.yaml can cause the chart to be saved outside its intended directory. This is due to improper validation of user-supplied input, enab...
PT-2024-4076 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.14.1 Description: The issue is related to the Helm client or SDK saving a chart outside its expected directory based on changes in the relative path within the Chart.yaml file. This occurs when the chart's name includ...
Vulnerability in core server (CVE-2023-2454)
CREATE SCHEMA ... schemaelement defeats protective searchpath changes This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. Database owners have that right by default, and explicit grants may extend it to other users. The PostgreSQL...
Fedora 31 : oddjob (2020-b1fa09aa64)
This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6 : - update license on src/buffer.h - changes '/var/run' to '/run' in systemd service file Orion Poplawski, 1834511 From 0.34.5 : - apply patch from Matthias Gerstner of the SUSE security team to fix a possible race...