4810 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-39276
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as follows: ============================================ WARNING: CPU:...
Linux Distros Unpatched Vulnerability : CVE-2024-35896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old...
Linux Distros Unpatched Vulnerability : CVE-2022-26486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild...
Linux Distros Unpatched Vulnerability : CVE-2022-49286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tpm: use trygetops in tpm-space.c As part of the series conversion to remove nested TPM operations:...
Linux Distros Unpatched Vulnerability : CVE-2024-46811
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox Why Coverity reports OVERRUN warning. soc.numstates could be 40. But array range...
CVE-2025-27676
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002...
CVE-2025-1932
creationtimestamp| type| source ---|---|--- 2025-03-04 15:50:52+00:00| seen| https://t.me/cvedetector/19509 2025-03-04 19:32:32+00:00| seen| Telegram/ur-jLM9TWuzZx6u6HVwGm1GC14lxVbO5sdyEUIKbqUh94J0 2025-03-04 19:48:33+00:00| seen|...
CVE-2025-22224
creationtimestamp| type| source ---|---|--- 2025-03-04 12:31:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6367 2025-03-04 12:59:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114104280234455247 2025-03-04 13:00:28+00:00| seen|...
CVE-2025-24924
creationtimestamp| type| source ---|---|--- 2025-03-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07 2025-03-05 00:33:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6465 2025-03-05 01:49:24+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2021-21416
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows i...
CVE-2024-56325
creationtimestamp| type| source ---|---|--- 2025-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-109/ 2025-03-04 11:00:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114103812642418026 2025-03-11 03:21:18+00:00| seen|...
CVE-2025-26887
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup elisqlreports allows Stored XSS.This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through = 5.21.35...
Mautic allows Improper Authorization in Reporting API
Summary This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any...
CVE-2022-49248
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction AV/C deferred transaction was supported at a commit 00a7bb81c20f "ALSA: firewire-lib: Add support for deferred transaction" while 'deferrable' flag can be...
CVE-2024-47053 Improper Authorization in Reporting API
This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated use...
CVE-2022-49546
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: fix memory leak of elf header buffer This is reported by kmemleak detector: unreferenced object 0xffffc900002a9000 size 4096: comm "kexec", pid 14950, jiffies 4295110793 age 373.951s hex dump first 32 bytes: 7f 45 4c 4...
UBUNTU-CVE-2022-49590
In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...
CVE-2022-49590
In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...
CVE-2022-49590
Summary : CVE-2022-49590 targets the Linux kernel IGMP subsystem, specifically a data race in reading sysctl_igmp_llm_reports that can occur when the value is changed concurrently. The documented fix adds READ_ONCE() to readers of net.ipv4.sysctl_igmp_llm_reports to prevent races. The vulnerabili...
CVE-2022-49590 igmp: Fix data-races around sysctl_igmp_llm_reports.
In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...