SUSE CVE-2024-41081

In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ilaoutput As explained in commit 1378817486d6 "tipc: block BH before using dstcache", net/core/dstcache.c helpers need to be called with BH disabled. ilaoutput is called from lwtunneloutput possibly from process...

SUSE CVE-2024-42114

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211ATTRTXQQUANTUM values syzbot is able to trigger softlockups, setting NL80211ATTRTXQQUANTUM to 2^31. We had a similar issue in schfq, fixed with commit d9e15a273306 "pktsched: fq: do not accept sill...

PT-2024-29927

Name of the Vulnerable Software and Affected Versions Soft AP affected versions not specified Description The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

CVE-2024-42400: Undefined Security Weakness

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

PT-2024-29921

Name of the Vulnerable Software and Affected Versions Soft AP Daemon Service affected versions not specified Description The issue concerns vulnerabilities in the Soft AP Daemon Service that could allow a threat actor to execute an unauthenticated Remote Code Execution RCE attack. Successful...

PT-2024-29925 · Unknown · Soft Ap Daemon

Name of the Vulnerable Software and Affected Versions: Soft AP daemon affected versions not specified Description: The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

CVE-2024-42394: Out-of-bounds Write

There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2024-42398: Uncontrolled Resource Consumption

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

CVE-2024-42393: Out-of-bounds Write

There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2024-42399: Uncontrolled Resource Consumption

Multiple unauthenticated Denial-of-Service DoS vulnerabilities exist in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilities results in the ability to interrupt the normal operation of the affected Access Point...

PT-2024-29926

Name of the Vulnerable Software and Affected Versions Soft AP affected versions not specified Description The issue concerns multiple unauthenticated Denial-of-Service DoS vulnerabilities in the Soft AP daemon, which is accessed via the PAPI protocol. Successful exploitation of these...

PT-2024-29920

Name of the Vulnerable Software and Affected Versions Soft AP Daemon Service affected versions not specified Description The issue concerns vulnerabilities in the Soft AP Daemon Service that could allow a threat actor to execute an unauthenticated Remote Code Execution RCE attack. Successful...

CVE-2024-28298

SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SECIDF, LIEIDF, PLANFIDF, CLIIDF, DOSIDF, and possibly other parameters to /BMServerR.dll/BMRest...

GHSA-M445-W3XR-VP2F soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests

Impact Any servers using soft-serve server and git Patches 0.7.5 Workarounds None. References n/a. --- It is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via environment manipulation and Git. The issue is that Soft Serve passes all...

soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests

Impact Any servers using soft-serve server and git Patches 0.7.5 Workarounds None. References n/a. --- It is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via environment manipulation and Git. The issue is that Soft Serve passes all...

CVE-2024-28298

CVE-2024-28298 is a SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1. Authenticated users can pass crafted values to /BMServerR.dll/BMRest via parameters such as SEC_IDF, LIE_IDF, PLANF_IDF, CLI_IDF, and DOS_IDF to execute arbitrary SQL commands. Public references (NVD/Red Hat/CVE record...

CVE-2024-28298: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SECIDF, LIEIDF, PLANFIDF, CLIIDF, DOSIDF, and possibly other parameters to /BMServerR.dll/BMRest...

CVE-2024-28298

SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SECIDF, LIEIDF, PLANFIDF, CLIIDF, DOSIDF, and possibly other parameters to /BMServerR.dll/BMRest...

CVE-2024-28298

SQL injection vulnerability in BM SOFT BMPlanning 1.0.0.1 allows authenticated users to execute arbitrary SQL commands via the SECIDF, LIEIDF, PLANFIDF, CLIIDF, DOSIDF, and possibly other parameters to /BMServerR.dll/BMRest...

CVE-2024-41956

Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via environment manipulation and Git. The issue is that Soft Serve passes all environment variables given by...