4718 matches found
CVE-2024-29163
HDF5 versions up to and including 1.14.3 are susceptible to a heap buffer overflow within the H5T__bit_find function. This vulnerability can lead to the corruption of the instruction pointer , potentially enabling an attacker to cause a denial of service or achieve code execution . The issue has ...
CVE-2024-29160
The HDF5 library through version 1.14.3 contains a heap buffer overflow in the H5HG__cache_heap_deserialize function. This vulnerability can result in the corruption of the instruction pointer, leading to a denial of service (DoS) or potential arbitrary code execution . The issue has been address...
CVE-2024-29158
HDF5 through 1.14.3 contains a stack buffer overflow in H5FLarrmalloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...
CVE-2024-29157
HDF5 versions through 1.14.3 are vulnerable to a heap buffer overflow in the H5HG_read function. This flaw can lead to the corruption of the instruction pointer , potentially allowing an attacker to cause a denial of service or achieve code execution . Remediation involves updating to a patched v...
CVE-2024-29157
HDF5 through 1.14.3 contains a heap buffer overflow in H5HGread, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...
gnutls security update
3.8.3-4 - Bump release to ensure el9 package is greater than el9 packages 3.8.3-3 - Bump release to ensure el9 package is greater than el9 packages 3.8.3-2 - Fix timing side-channel in deterministic ECDSA RHEL-28959 - Fix potential crash during chain building/verification RHEL-28954...
CVE-2024-1695
A potential security vulnerability has been identified in the HP Application Enabling Software Driver for certain HP PC products, which might allow escalation of privilege. HP is releasing software updates to mitigate this potential vulnerability...
CVE-2024-34472
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerability exists in the mliRealtimeEmails.php file. The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmails.php does not properly sanitize input, allowing an...
Critical Cybersecurity Loopholes Found in Paris 2024 Olympics Infrastructure
By Deeba Ahmed Paris 2024 Olympics face cybersecurity threats. Outpost24 analysis reveals open ports, SSL misconfigurations, and more. Can the organizers secure the Games in time? Read for critical insights and potential consequences. This is a post from HackRead.com Read the original post:...
CVE-2024-34472
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An authenticated blind SQL injection vulnerability exists in the mliRealtimeEmails.php file. The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmails.php does not properly sanitize input, allowing an...
CVE-2023-42079
PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the...
USPS Shipping for WooCommerce – Live Rates < 1.10.0 - Sensitive Information Exposure
Description The USPS Shipping for WooCommerce – Live Rates plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.4 via log files. This makes it possible for unauthenticated users to extract potentially sensitive information from log files...
CVE-2024-27019
A potential data-race flaw was found in nftobjtypeget in the Linux kernel. This issue can lead to a crash...
CVE-2022-48669
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in paprgetattr buf is allocated in paprgetattr, and krealloc of buf could fail. We need to free the original buf in the case of failure...
CVE-2022-48669
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in paprgetattr buf is allocated in paprgetattr, and krealloc of buf could fail. We need to free the original buf in the case of failure...
CVE-2022-48669
A memory leak vulnerability exists in the Linux kernel within the powerpc/pseries component. The issue occurs in the papr_get_attr() function where a buffer (buf) is allocated, but the original buffer is not freed if the krealloc() call fails. This flaw may lead to compromised availability . The ...
CVE-2024-26952
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to -Buffer offset to...
CVE-2024-26930
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha-vpmap pointer Coverity scan reported potential risk of double free of the pointer ha-vpmap. ha-vpmap was freed in qla2x00memalloc, and again freed in function qla2x00memfreeha. Assign NULL...
CVE-2024-27020
In CVE-2024-27020, the Linux kernel nf_tables code had a potential data race when nft_unregister_expr() ran concurrently with __nft_expr_type_get() due to insufficient protection while iterating nf_tables_expressions. The fix involves iterating nf_tables_expressions with list_for_each_entry_rcu()...