12785 matches found
USN-6837-2 ruby-rack vulnerabilities
It was discovered that Rack incorrectly parsed certain media types. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2024-25126 It was discovered that Rack...
USN-6837-2: Rack vulnerabilities
It was discovered that Rack incorrectly parsed certain media types. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2024-25126 It was discovered that Rack...
PT-2024-38574 · WordPress · The Contact Form By Bit Form
Name of the Vulnerable Software and Affected Versions: Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress versions 2.0 through 2.13.9 Description: The issue is related to generic SQL Injection via the id...
DEBIAN-CVE-2024-43828
In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fastcommit When doing fastcommit replay an infinite loop may occur due to an uninitialized extentstatus struct. ext4extdetermineinserthole does not detect the replay and calls...
DEBIAN-CVE-2024-42266
In the Linux kernel, the following vulnerability has been resolved: btrfs: make cowfilerangeinline honor lockedpage on error The btrfs buffered write path runs through extentwritepage which has some tricky return value handling for writepagedelalloc. Specifically, when that returns 1, we exit, bu...
UBUNTU-CVE-2024-42266
In the Linux kernel, the following vulnerability has been resolved: btrfs: make cowfilerangeinline honor lockedpage on error The btrfs buffered write path runs through extentwritepage which has some tricky return value handling for writepagedelalloc. Specifically, when that returns 1, we exit, bu...
CVE-2024-43366 zkvyper ignored loop range bounds
zkvyper is a Vyper compiler. Starting in version 1.3.12 and prior to version 1.5.3, since LLL IR has no Turing-incompletness restrictions, it is compiled to a loop with a much more late exit condition. It leads to a loss of funds or other unwanted behavior if the loop body contains it. However,...
Kingsoft WPS Office 路径遍历漏洞
Kingsoft WPS Office is a kind of office software from Kingsoft China. It provides document processing functions. A path traversal vulnerability exists in Kingsoft WPS Office versions 12.2.0.13110 through 12.2.0.13489, which stems from improper path validation in promecefpluginhost.exe. An attacke...
PT-2024-31376
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the mm/vmalloc component of the Linux kernel, where the vmap pages range noflush function assumes that its argument pages contains pages with the same page shift...
PT-2024-30529 · Zkvyper · Zkvyper
Name of the Vulnerable Software and Affected Versions: zkvyper versions 1.3.12 through 1.5.3 Description: The issue arises from the compilation of LLL IR to a loop with a late exit condition, potentially leading to a loss of funds or unwanted behavior if the loop body contains specific conditions...
CVE-2023-50314
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713...
CLSA-2024-1723623068 java-1.8.0-openjdk: Fix of 6 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination RCE - CVE-2024-21144: Invalid header...
CVE-2021-26367
A malicious attacker in x86 can misconfigure the Trusted Memory Regions TMRs, which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability...
CVE-2021-26367
A malicious attacker in x86 can misconfigure the Trusted Memory Regions TMRs, which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability...
PT-2024-6098 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions 5.0.0 through 7.0.0rc2 Description: The issue is related to the configuration of SMS notifications in Zabbix, where an AT command injection occurs due to the lack of validation of the Number field. This allows an attacker to...
kernel: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
A vulnerability was found in the Linux kernel's Hisilicon Ethernet driver, in the hnsdsafgesrstbyport function, which allows for a possible array overflow, which occurs when an input value exceeds the expected range, leading to potential memory corruption...
PT-2024-38321 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9 through 9.3.2 Concrete CMS versions below 8.5.18 Description: The issue concerns a Stored XSS vulnerability in the getAttributeSetName function. A rogue administrator could inject malicious code. Recommendations: For...
SUSE CVE-2024-6782
Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...
SUSE CVE-2024-28579
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the FreeImageUnload function when reading images in HDR format...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the unmaphugepagerange function in the mm/hugetlb.c file of the Linux kernel’s memory manager is related to an incorrect check in the code that returns vmaneedsreservation. Exploiting this vulnerability could allow an attacker to trigger a service failure...