kernel: net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...

kernel: media: dvb-usb: fix memory leak in dvb_usb_adapter_init()

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: fix memory leak in dvbusbadapterinit Syzbot reports a memory leak in "dvbusbadapterinit". The leak is due to not accounting for and freeing current iteration's adapter-priv in case of an error. Currently if an err...

TEM Opera Plus FM Family Transmitter 35.45 Cross Site Request Forgery Vulnerability

CSRF Change Forward Power: -------------------------...

Cisco Emergency Responder Static Credentials (cisco-sa-cer-priv-esc-B9t3hqk9)

According to its self-reported version, Cisco Emergency Responder Static Credentials is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

CVE-2023-38899

SQL injection vulnerability in berkaygediz OBlog v.1.0 allows a local attacker to escalate privileges via the securefilepriv component...

PT-2023-21824 · Qualcomm · Sd205 Firmware +58

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the cam get device priv function not checking the type of handle being returned, which can be a device, session, or link handle...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from the camgetdevicepriv function not checking the type of handle device/session/link returned...

PT-2023-4024 · Oracle · Oracle Hyperion Workspace

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Workspace version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the UI and Visualization component of Oracle Hyperion Workspace. It allows a low-privileged attacker with network access via...

PT-2023-22062 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 20.2R3-S5 through 20.2R3-S6 Juniper Networks Junos OS versions 20.3R3-S2 through 20.3R3-S5 Juniper Networks Junos OS versions 20.4R3-S1 through 20.4R3-S4 Juniper Networks Junos OS versions 21.1R3 through...

Sql injection

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= this may interact with secure-file-priv...

CVE-2022-45030

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= this may interact with secure-file-priv...

PT-2023-14576 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.7 Description: A SQL injection issue exists in rConfig via "lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command=" which may interact with secure-file-priv. Recommendations: For rConfig version 3.9.7, consider disabling...

CVE-2022-45030

Summary: CVE-2022-45030 is a SQL injection in rConfig 3.9.7 via the endpoint lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (may interact with secure-file-priv). Multiple sources (NVD, Red Hat, CVE List, CN) classify the impact as high (CVSS v3.1: 8.8, HIGH) with network access, low user in...

AZL-11610 CVE-2022-3110 affecting package kernel for versions less than 5.15.86.1-1

An issue was discovered in the Linux kernel through 5.16-rc6. rtwinitxmitpriv in drivers/staging/r8188eu/core/rtwxmit.c lacks check of the return value of rtwallochwxmits and will cause the null pointer dereference...

PT-2024-11827 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the sja1105 setup devlink regions function. When dsa devlink region create fails, priv-regions is not...

PT-2022-35622 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A potential memory leak was identified in the rtw init cmd priv function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

CVE-2021-34854

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-29004

rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an attacker may successfully upload a webshell to the server and access it remotely...

PT-2024-11311 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free UAF bug has been resolved in the Linux kernel. The issue occurs because priv, which is netdev private data, cannot be used after the free netdev call. Using priv after...

PT-2024-11249 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ethtool: strset: fix message length calculation in the Linux kernel. The outer nest for ETHTOOL A STRSET STRINGSETS is not accounted for, which may result i...