Lucene search
+L

270 matches found

RedHat Linux
RedHat Linux
added 2024/01/25 11:04 a.m.62 views

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS6.8AI score0.09141EPSS
SaveExploits4References18
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.20 views

PT-2023-9608 · Oracle · Peoplesoft Enterprise Elm Enterprise Learning Management

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise ELM Enterprise Learning Management version 9.2 Description: The issue is related to a vulnerability in the authorization procedure of the Enterprise Learning Management component. This vulnerability allows a low-privileg...

5.5CVSS7.5AI score0.00316EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.8 views

kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...

5.7AI score0.00206EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/11/07 9:03 a.m.8 views

kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...

5.7AI score0.00206EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2023/11/07 9:03 a.m.15 views

kernel: media: dvb-usb: fix memory leak in dvb_usb_adapter_init()

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in "dvbusbadapterinit". The leak is due to not accounting for and freeing current iteration's adapter-priv in case of an error. Currently if an err...

6.8AI score0.00232EPSS
SaveExploits0References5
zdt
zdt
added 2023/10/26 12:00 a.m.341 views

TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery Vulnerability

CSRF Change Forward Power: -------------------------...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/10/13 12:00 a.m.28 views

Cisco Emergency Responder Static Credentials (cisco-sa-cer-priv-esc-B9t3hqk9)

According to its self-reported version, Cisco Emergency Responder Static Credentials is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

9.8CVSS9.2AI score0.02427EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2023/08/21 12:15 p.m.6 views

CVE-2023-38899

SQL injection vulnerability in berkaygediz OBlog v.1.0 allows a local attacker to escalate privileges via the securefilepriv component...

7.8CVSS5.8AI score0.00359EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.42 views

PT-2023-21824 · Qualcomm · Sd205 Firmware +58

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the cam get device priv function not checking the type of handle being returned, which can be a device, session, or link handle...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.19 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from the camgetdevicepriv function not checking the type of handle device/session/link returned...

7.8CVSS6.8AI score0.00122EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/18 12:00 a.m.11 views

PT-2023-4024 · Oracle · Oracle Hyperion Workspace

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Workspace version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the UI and Visualization component of Oracle Hyperion Workspace. It allows a low-privileged attacker with network access via...

8.7CVSS7AI score0.0055EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/04/17 12:00 a.m.11 views

PT-2023-22062 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 20.2R3-S5 through 20.2R3-S6 Juniper Networks Junos OS versions 20.3R3-S2 through 20.3R3-S5 Juniper Networks Junos OS versions 20.4R3-S1 through 20.4R3-S4 Juniper Networks Junos OS versions 21.1R3 through...

5.5CVSS5.4AI score0.00172EPSS
SaveExploits0References5
Prion
Prion
added 2023/04/15 2:15 a.m.28 views

Sql injection

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= this may interact with secure-file-priv...

6.5CVSS9AI score0.02685EPSS
SaveExploits4References2Affected Software1
CVE
CVE
added 2023/04/15 12:00 a.m.124 views

CVE-2022-45030

Summary: CVE-2022-45030 is a SQL injection in rConfig 3.9.7 via the endpoint lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (may interact with secure-file-priv). Multiple sources (NVD, Red Hat, CVE List, CN) classify the impact as high (CVSS v3.1: 8.8, HIGH) with network access, low user in...

8.8CVSS9AI score0.02685EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
added 2023/04/15 12:00 a.m.53 views

CVE-2022-45030

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= this may interact with secure-file-priv...

9.2AI score0.02685EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
added 2023/04/15 12:00 a.m.15 views

PT-2023-14576 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.7 Description: A SQL injection issue exists in rConfig via "lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command=" which may interact with secure-file-priv. Recommendations: For rConfig version 3.9.7, consider disabling...

8.8CVSS8.8AI score0.02685EPSS
SaveExploits4References6
OSV
OSV
added 2022/12/14 9:15 p.m.12 views

AZL-11610 CVE-2022-3110 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 5.16-rc6. rtwinitxmitpriv in drivers/staging/r8188eu/core/rtwxmit.c lacks check of the return value of rtwallochwxmits and will cause the null pointer dereference...

5.5CVSS7.2AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/06 12:00 a.m.13 views

PT-2024-11827 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the sja1105 setup devlink regions function. When dsa devlink region create fails, priv-regions is not...

9.1CVSS6.6AI score0.04079EPSS
SaveExploits12References1797
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.7 views

PT-2022-35622 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential memory leak was identified in the rtw init cmd priv function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2021/10/25 5:15 p.m.14 views

CVE-2021-34854

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

7.8CVSS7.4AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder