CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()

In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the sockmap module not properly handling soft locks in the sockhashfree function...

Schneider Electric Zelio Soft 2 ZM2 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric Zelio Soft 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2024-9981

The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server...

Schneider Electric Zelio Soft 2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Zelio Soft 2 Vulnerabilities : Use After Free, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

DEBIAN-CVE-2024-47660

In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENTWATCHED flags lazily In some setups directories can have many usually negative dentries. Hence fsnotifyupdatechilddentryflags function can take a significant amount of time. Since the bulk of this function...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. A security vulnerability exists in the Linux kernel. An attacker exploits the vulnerability to cause a soft lockup...

CVE-2024-8518

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...

CVE-2024-8422

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...

CVE-2024-8422

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...

CVE-2024-8518

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...

CVE-2024-8518

CVE-2024-8518 affects Schneider Electric Zelio Soft/Ze io Soft 2. An Improper Input Validation vulnerability could cause the Zelio Soft 2 application to crash when loading a specially crafted project file. According to ICS data, affected versions are prior to 5.4.2.2. Remediation: update to versi...

CVE-2024-8422

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...

CVE-2024-8422

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file...

CVE-2024-8422

Schneider Electric Zelio Soft 2 contains a Use After Free vulnerability (CVE-2024-8422) in the parsing of ZM2 project files. Affected versions are prior to 5.4.2.2. Exploitation can lead to arbitrary code execution, with potential for denial of service and loss of confidentiality and integrity. I...

Schneider Electric Zelio Soft 资源管理错误漏洞

Schneider Electric Zelio Soft is a suite of logic controller programming software from Schneider Electric France. A resource management error vulnerability exists in Schneider Electric Zelio Soft versions prior to v5.4.2.2 that stems from the presence of a post-release reuse vulnerability that...

PT-2024-39001 · Schneider Electric · Zelio Soft 2

Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 versions prior to 5.4.2.2 Description: A Use After Free vulnerability exists that could cause arbitrary code execution, denial of service, and loss of confidentiality and integrity when an application user opens a malicious Zelio...

PT-2024-8102 · Schneider Electric · Zelio Soft 2

Name of the Vulnerable Software and Affected Versions: Zelio Soft 2 affected versions not specified Description: The issue is related to improper input validation, which could cause the Zelio Soft 2 application to crash when a specially crafted project file is loaded. This can be exploited by an...

Schneider Electric Zelio Soft 输入验证错误漏洞

Schneider Electric Zelio Soft is a suite of logic controller programming software from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric Zelio Soft versions prior to v5.4.2.2, which stems from the presence of an incorrect input validation vulnerabilit...

CVE-2024-47310

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arisoft ARI Fancy Lightbox ari-fancy-lightbox allows Stored XSS.This issue affects ARI Fancy Lightbox: from n/a through = 1.3.17...