Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a soft locking issue in flushtoldisk...

GHSA-J496-CRGH-34MX ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks

Name: ASA-2024-007: Potential Reentrancy using Timeout Callbacks in ibc-hooks Component: ibc-go Criticality: Critical ACMv1: I:Critical; L:AlmostCertain Affected versions: v4.6.0, v5.4.0, v6.3.0, v7.4.0, v8.2.0 Affected users: Chain Builders + Maintainers Summary Through the deployment and...

PT-2024-8480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a while-loop in the ast dp set on off function that could lead to an infinite loop. This is because the register, VGACRI-Dx, checked in this API is a scratch...

PT-2024-10501

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc7-syzkaller-g707081b61156 Description The vulnerability is related to the batman-adv component in the Linux kernel, which is prone to soft lockups due to incorrect handling of empty buckets in the batadv...

CVE-2024-25735

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request...

CVE-2024-2865 SQLi in Mergen Soft Quality Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: through 25032024...

ruby:3.1 security, bug fix, and enhancement update

ruby 3.1.4-142 - Upgrade to Ruby 3.1.4. Resolves: RHEL-28565 - Fix HTTP response splitting in CGI. Resolves: RHEL-28564 - Fix ReDos vulnerability in URI. Resolves: RHEL-28567 Resolves: RHEL-28576 - Fix ReDos vulnerability in Time. Resolves: RHEL-28566 - Make RDoc soft dependency in IRB. Resolves:...

CVE-2023-51487

Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...

CVE-2023-51487

Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...

CVE-2023-51487

CVE-2023-51487 is a CSRF vulnerability in the ARI Stream Quiz WordPress plugin, affecting ARI Stream Quiz versions up to 1.2.32. The connected documents confirm the issue exists and reference CSRF as the vulnerability type, but do not provide an explicit fixed version or patch details. Affected p...

CVE-2023-51487: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ARI Soft ARI Stream Quiz.This issue affects ARI Stream Quiz: from n/a through 1.2.32...

PT-2024-4347 · Inpas Soft · Inpas Soft Uniport Eslip

Name of the Vulnerable Software and Affected Versions: INPAS SOFT UniPORT Eslip affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain access to confidential information. Recommendations: At the momen...

PT-2024-4348 · Inpas Soft · Inpas Soft Uniport Eslip

Name of the Vulnerable Software and Affected Versions: INPAS SOFT UniPORT Eslip affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by a remote attacker to gain access to the application's administrative web interface...

SUSE CVE-2023-52493

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parsexferevent such that a callback given to client can potentially queu...

ROS-2-1029

2.1029 Notification on the update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia №4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

ROS-2-730

2.730 Notification on the update of the Red OS OPERATING SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia №4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

ROS-2-73

2.73 Notification on the update of OPERATION SYSTEM "RED OS" MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia №4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technical...

ROS-2-1110

2.1110 Notification on the update of the Red OS OPERATING SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the...

ROS-2-51

2.51 Notification on the update of OPERATION SYSTEM "RED OS" MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia №4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technical...

ROS-2-373

2.373 Notification on the update of the Red OS OPERATION SYSTEM MIS RED SOFT LLC notifies of the renewal of the previously obtained certificate of conformity of FSTEC of Russia 4060 until 12.01.2029 of the operating system "RED OS", decimal number RU.29926343.02.01-01. You can contact the technic...