CISA: Industrial Control Systems Vulnerabilities and Resources

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: BMAP Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

DEBIAN-CVE-2024-57875

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...

AZL-68570 CVE-2024-57875 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...

UBUNTU-CVE-2024-57875

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk-convzonesbitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the diskzoneisconv helper by RCU protecting the...

CVE-2024-57226

creationtimestamp| type| source ---|---|--- 2025-01-10 17:23:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113805216590032112 2025-01-10 18:04:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1207 2025-01-10 18:15:55+00:00| seen|...

Gradio < 4.42.0 SSRF

The version of Gradio installed on the remote host is prior to 4.42.0. It is, therefore, affected by a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources...

CVE-2025-21380

Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network...

CVE-2025-21380 Azure Marketplace SaaS Resources Information Disclosure Vulnerability

...

Azure Marketplace SaaS Resources Information Disclosure Vulnerability

Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network...

PT-2025-1061 · Microsoft · Azure Saas Resources

Name of the Vulnerable Software and Affected Versions: Azure SaaS Resources affected versions not specified Description: The issue is related to improper access control in Azure SaaS Resources, which allows an authorized attacker to disclose information over a network. This can potentially lead t...

IBM Cognos Controller 信任管理问题漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A trust management issue vulnerability exists in IBM...

CVE-2024-56513

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...

CVE-2024-56513 Karmada PULL Mode Cluster Privilege Escalation

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes clusters and clouds. Prior to version 1.12.0, the PULL mode clusters registered with the karmadactl register command have excessive privileges to access control plane resources...

Denial Of Service (DoS)

league/commonmark is vulnerable to Denial of service DoS. The vulnerability is due to unbounded resource exhaustion caused by inefficient code handling specially crafted Markdown inputs, which allows an attacker to tie up CPU resources or PHP-FPM processes and deny service to legitimate users...

Race Condition Vulnerability

github.com/moby/moby is vulnerable to a Race Condition. The vulnerability is due to improper synchronization in builder/builder-next/adapters/snapshot/layer.go within the EnsureLayer function, allowing concurrent builds to access shared resources without adequate safeguards, leading to resource...

PT-2026-7456

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity...

PT-2026-5517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device leak exists in the dmaengine subsystem, specifically within the at hdmac component and the of dma xlate function. The issue occurs because a reference to a DMA platform device i...

PT-2025-34386

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to PCI device hotplug handling within the pnv php driver. When the root of a nested PCIe bridge configuration is unplugged, the driver leaks...

PT-2025-30824

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists within the remoteproc subsystem of the Linux kernel. Specifically, when attempting to attach to a remote processor using rproc attach, if rproc handle resources fail...