Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/04/14 11:34 p.m.•17 views

Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

5.3CVSS6AI score0.00364EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/01/27 12:00 a.m.•7 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005106 advisory. In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger...

7.8CVSS6.1AI score0.00251EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•7 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: leds: Trigger: Unregisters sysfs attributes before calling deactivate. Triggers that have trigger-specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactiva...

7.8CVSS6.1AI score0.00251EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/08/18 2:01 a.m.•12 views

SUSE CVE-2024-43830

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactivat...

5.5CVSS6.2AI score0.00251EPSS
SaveExploits0References14
OSV
OSV
•added 2024/08/17 10:15 a.m.•26 views

UBUNTU-CVE-2024-43830

In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate Triggers which have trigger specific sysfs attributes typically store related data in trigger-data allocated by the activate callback and freed by the deactivat...

7.8CVSS6.2AI score0.00251EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
•added 2024/06/21 12:00 a.m.•1 views

PT-2024-30692

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the Linux kernel, where a vulnerability has been resolved by unregistering sysfs attributes before calling deactivate. Triggers with specific sysfs attributes store...

9.8CVSS5.6AI score0.00251EPSS
SaveExploits0
Rows per page
Query Builder