1416 matches found
CVE-2022-49646
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...
CVE-2022-49646 wifi: mac80211: fix queue selection for mesh/OCB interfaces
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...
CVE-2022-49646
CVE-2022-49646 affects the Linux kernel’s wifi/mac80211 code. When using iTXQ, the queue-selection logic assumed a single broadcast vif queue (BE). Allowing non-BE queue markings breaks that assumption and can break txq->ac == skb_queue_mapping, impacting queue handling in the driver and poten...
CVE-2022-49646 wifi: mac80211: fix queue selection for mesh/OCB interfaces
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a queue selection issue in the mesh/OCB interface...
Vega 跨站脚本漏洞
Vega is a Javscript-based software from the Vega team that can be used to create interactive visual displays. The software can describe data visualizations using JSON format and generate interactive views using HTML5 Canvas or SVG. Vega suffers from a cross-site scripting vulnerability that stems...
The vulnerability of the mlx5_lagdestroy_definers() function in the mlx5 driver (drivers/net/ethernet/mellanox/mlx5/core/lag/port_sel.c) in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the mlx5lagdestroydefiners function in the mlx5 driver drivers/net/ethernet/mellanox/mlx5/core/lag/portsel.c in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: A potential use-after-free UaF scenario can occur when selecting an endpoint. The functions selectlocaladdress and selectsignaladdress both select an endpoint from a list within a RCU-protected section. However, they...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the issue where a tainted pointer was deleted instead of the previously created rules when the flow rule creation failed. This issue occurs when the mlx5lagcreateportseltable function fails to create flow rules...
Azure Linux 3.0 Security Update: cmake / curl / mysql (CVE-2024-2004)
The version of cmake / curl / mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-2004 advisory. - When a protocol selection parameter option disables all protocols without adding any then the...
CVE-2024-11721
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.24.5. This is due to insufficient controls on the user role select field when utilizing the 'Role' field in a form. This makes it possible for unauthenticated...
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: Make sure the correct FW package is installed on non-CUDA. only obsolete 555 CUDA driver/firmware packages For CUDA: update version to 565.57.01 Add 'dummy' firmware package on SLE to work around update issues. On SLE, the...
CVE-2025-23086
CVE-2025-23086 affects Brave Browser (versions 1.70.x–1.73.x) and concerns the feature that shows a site’s origin in the OS file selector dialog when a user is prompted to upload or download a file. The issue arises because the origin could be inferred incorrectly in certain cases, and when combi...
Brave Browser 输入验证错误漏洞
Brave Browser is a fast, private and secure web browser for PC, Mac and mobile devices from Brave, Inc. An input validation error vulnerability exists in Brave Browser versions 1.70.x through 1.73.x. The vulnerability stems from the source of a site not being correctly identified in the file...
The vulnerability of the Addressing system’s plugin for requests, incidents, and inventory management of computer equipment in GLPI arises from the use of an external controlled input for selecting classes or codes. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the addressing plugin in the GLPI system for managing requests, incidents, and inventory of computer equipment is related to the use of an external controlled input for selecting classes or codes. Exploiting this vulnerability can allow a malicious actor to gain unauthorized...
Node.js: Usage of unsafe random function in undici for choosing boundary
The vulnerability in the Undici library involves the use of an unsafe random function to choose the boundary for a multipart/form-data request. The use of Math.random to generate this boundary can be predicted if several of its generated values are known. This could potentially allow an attacker ...
xfrm: validate new SA's prefixlen using SA family when sel.family is unset
...
Exploit for Uncontrolled Resource Consumption in Ietf Http
CVE-2023-44487 - HTTP/2 Rapid Reset Exploit PoC --- Desc...
The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, developed by MC Works64, arises from the use of external control inputs for class selection. This allows a intruder to execute arbitrary code.
The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection via MC Works64 is related to the use of externally controlled input data for class selection. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...
