12789 matches found
SUSE CVE-2022-39956
The OWASP ModSecurity Core Rule Set CRS is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-Transfer-Encoding multipart MIME header fields that will not be decoded and...
SUSE CVE-2022-40284
A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon...
SUSE CVE-2022-40899
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server...
SUSE CVE-2022-47942
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in setntacldacl, related to use of SMB2QUERYINFOHE after a malformed SMB2SETINFOHE command...
SUSE CVE-2023-24816
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...
CVE-2023-24160
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function...
TOTOLINK CA300-PoE Command Injection Vulnerability
The TOTOLINK CA300-PoE is a wireless access point from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884, which was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function...
PT-2023-35119
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.86 through 5.15.92 Description The issue is related to a use-after-free UAF bug in the bic set bfqq function, specifically affecting the bfqq in the block, bfq. This problem was introduced in version v5.15.86 and is...
PT-2024-14699
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible memory leak in the ovs meter cmd set function has been resolved. The issue occurred because old meter was not freed after being detached, regardless of whether the new meter w...
PT-2023-34927
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.11 Description The issue is related to a cleanup problem after the dev set name function is called. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...
PT-2023-1661
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the Linux kernel may trigger a use-after-free when a malicious USB device, advertising itself as an Asus device, is plugged in or disconnected. This issue is related to the asu...
Fedora 36 : php-symfony4 (2023-aecde14648)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-aecde14648 advisory. Version 4.4.50 2023-02-01 security cve-2022-24895 Security/Http Remove CSRF tokens from storage on successful login nicolas-grekas security...
UBUNTU-CVE-2023-24816
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...
PYSEC-2023-17
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...
PYSEC-2023-17
IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requir...
OESA-2023-1077 lxc security update
Containers are insulated areas inside a system, which have their own namespace for filesystem, network, PID, IPC, CPU and memory allocation and which can be created using the Control Group and Namespace features included in the Linux kernel. Security Fixes: lxc-user-nic in lxc through 5.0.1 is...
PT-2025-40191
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the cpu rmap library. Specifically, a use-after-free condition can occur on the rmap-obj array entries. This happens when irq set affinity...
PT-2023-19998 · Tenda · Tenda Ac500
Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is related to a Buffer Overflow in the formOneSsidCfgSet function via the ssid parameter. Recommendations: For Tenda AC500 version 2.0.1.91307, as a temporary workaround, consider...
