Lucene search
+L

2432 matches found

osv_debian
osv_debian
•added 2024/12/27 3:15 p.m.•14 views

DEBIAN-CVE-2024-56587

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of...

5.5CVSS5.7AI score0.00255EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/27 3:15 p.m.•22 views

UBUNTU-CVE-2024-56587

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of...

5.5CVSS6AI score0.00255EPSS
SaveExploits0References46
Debian CVE
Debian CVE
•added 2024/12/27 2:50 p.m.•25 views

CVE-2024-56587

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of...

5.5CVSS5.7AI score0.00255EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/12/27 2:50 p.m.•32 views

CVE-2024-56587 leds: class: Protect brightness_show() with led_cdev->led_access mutex

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightnessshow with ledcdev-ledaccess mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a ledcdev addition and later a another call to access of...

0.00255EPSS
SaveExploits0References7
osv_azl
osv_azl
•added 2024/12/27 2:15 p.m.•16 views

AZL-55192 CVE-2024-53222 affecting package kernel for versions less than 6.6.85.1-1

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in compalgorithmshow LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ 3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0...

5.5CVSS5.9AI score0.00223EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/12/27 2:15 p.m.•8 views

DEBIAN-CVE-2024-53222

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in compalgorithmshow LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ 3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/27 2:15 p.m.•15 views

AZL-59031 CVE-2024-53216 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: release svcexpkey/svcexport with rcuwork The last reference for cachehead can be reduced to zero in cshow and eshowusing rcureadlock and rcureadunlock. Consequently, svcexportput and expkeyput will be invoked, leading to tw...

7.8CVSS6.7AI score0.00222EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/27 2:15 p.m.•24 views

UBUNTU-CVE-2024-53216

In the Linux kernel, the following vulnerability has been resolved: nfsd: release svcexpkey/svcexport with rcuwork The last reference for cachehead can be reduced to zero in cshow and eshowusing rcureadlock and rcureadunlock. Consequently, svcexportput and expkeyput will be invoked, leading to tw...

7.8CVSS6.9AI score0.00222EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•3 views

PT-2024-36894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A NULL pointer issue was observed in the Linux kernel when a hid device is added from Process A, resulting in the addition of a led cdev, and a subsequent call to access the led cdev attribute...

5.5CVSS0.00255EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/12/12 12:00 a.m.•5 views

PT-2024-17257

Name of the Vulnerable Software and Affected Versions Integrate Firebase plugin for WordPress versions up to and including 0.9.3 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'firebase show' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS0.00295EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2024/12/10 12:00 a.m.•13 views

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel component is related to incorrect blocking in the ueventshow function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score
SaveExploits0References48Affected Software11
osv_cve
osv_cve
•added 2024/12/02 7:15 p.m.•19 views

CVE-2024-52724

ZZCMS 2023 was discovered to contain a SQL injection vulnerability in /q/show.php...

9.8CVSS5.8AI score0.00578EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•11 views

ZZCMS 安全漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023, which stems from an SQL injection vulnerability contained in /q/show.php...

9.8CVSS7.9AI score0.00578EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2024/11/26 12:55 a.m.•15 views

kernel: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Avoid memcpy field-spanning write WARNING When the "storcli2 show" command is executed for eHBA-9600, mpi3mr driver prints this WARNING message: memcpy: detected field-spanning write size 128 of single field...

5.5CVSS6.1AI score0.00228EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/11/22 12:00 a.m.•29 views

PT-2024-35445 · Deno · Deno Standard Library

Name of the Vulnerable Software and Affected Versions: Deno Standard Library versions prior to 1.0.11 Description: The issue affects the Deno Standard Library, specifically the http/file-server module's serveDir function when used with the showDirListing: true option. This setup is vulnerable to...

5.1CVSS6.2AI score0.00612EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•7 views

PT-2024-16555

Name of the Vulnerable Software and Affected Versions If-So Dynamic Content Personalization plugin for WordPress versions up to, and including, 1.9.2.1 Description The issue allows authenticated attackers with Contributor-level access and above to extract data from private or draft posts created...

4.3CVSS0.00469EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•7 views

CVE-2024-10796: Authorization Bypass Through User-Controlled Key

The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.2.1 via the 'ifso-show-post' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers...

4.3CVSS5.7AI score0.00469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/20 12:00 a.m.•8 views

PT-2024-16472

Name of the Vulnerable Software and Affected Versions UltraAddons – Elementor Addons plugin for WordPress versions up to, and including, 1.1.8 Description The issue allows authenticated attackers with Contributor-level access and above to expose the contents of draft, private, and pending posts d...

4.3CVSS0.00497EPSS
SaveExploits0References6
NVD
NVD
•added 2024/11/19 5:15 p.m.•72 views

CVE-2024-51831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aboutorab Pourhaghani Persian Nested Show/Hide Text persian-nested-showhide-text allows Stored XSS.This issue affects Persian Nested Show/Hide Text: from n/a through = 1.5...

6.5CVSS0.0039EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•22 views

CVE-2024-51656

Cross-Site Request Forgery CSRF vulnerability in litefeel Flash Show And Hide Box flash-show-and-hide-box allows Stored XSS.This issue affects Flash Show And Hide Box: from n/a through = 1.6...

7.1CVSS0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder