CVE-2024-50207 ring-buffer: Fix reader locking when changing the sub buffer order

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

CVE-2024-50207 ring-buffer: Fix reader locking when changing the sub buffer order

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reader locking issue in the presence of sub-buffer order changes...

CVE-2024-51736

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

DEBIAN-CVE-2024-10525

In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its onsubscribe callback. This affects the mosquittosub and mosquittorr clients...

[SECURITY] Fedora 41 Update: valkey-8.0.1-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 40 Update: redis-7.2.6-1.fc40

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

PT-2024-31924 · Km08-708H +1 · Km08-708H +1

Name of the Vulnerable Software and Affected Versions: KM08-708H version 1.1 Description: A buffer overflow issue exists due to the strcpy function being executed without checking the length of the string in the sub 445BDC function within the /usr/sbin/goahead program. This leads to a buffer...

PT-2024-31148

Name of the Vulnerable Software and Affected Versions FBM 292W version 21.03.10V Description A critical issue has been discovered, affecting the sub 4901E0 function in the msp info.htm file. Manipulation of the path parameter can lead to command injection. Recommendations For FBM 292W version...

PT-2024-31954 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.6 Description: The issue is a command injection vulnerability that allows attackers to execute arbitrary commands via supplying a crafted HTTP message. This is achieved through the sub 2C920 function at the...

PT-2024-7148 · D Link · D-Link Dir-820L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-820L version 1.05B03 Description: The issue is a stack overflow vulnerability located in the sub 451208 function. This vulnerability can be exploited by a remote attacker to impact the confidentiality, integrity, and availability o...

PT-2024-31204

Name of the Vulnerable Software and Affected Versions D-Link COVR-2600R version FW101b05 Description The issue is related to a Buffer Overflow vulnerability. In the function sub 24E28, the HTTP REFERER is obtained through an environment variable, and this field is controllable, allowing it to be...

PT-2024-31823 · Bandisoft · Bandiview

Name of the Vulnerable Software and Affected Versions: Bandisoft BandiView version 7.05 Description: The issue is related to incorrect access control via the sub 0x232bd8 function, resulting in a denial of service DOS. Recommendations: For Bandisoft BandiView version 7.05, consider disabling the...

PT-2024-31824 · Bandisoft · Bandiview

Name of the Vulnerable Software and Affected Versions: Bandisoft BandiView version 7.05 Description: The issue is a buffer overflow vulnerability that occurs due to insufficient validation of PSD files. This happens through the sub 0x410d1d function. Recommendations: For Bandisoft BandiView versi...

PT-2024-31822 · Bandisoft · Bandiview

Name of the Vulnerable Software and Affected Versions: Bandisoft BandiView version 7.05 Description: The issue is related to Incorrect Access Control in the sub 0x3d80fc function via a crafted POC file. This can lead to unauthorized access. Recommendations: For Bandisoft BandiView version 7.05,...

CVE-2024-45066: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-43693: Improper Neutralization of Special Elements used in a Command

A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE UTILITY sub-menu can allow a remote attacker to inject arbitrary commands...

CVE-2024-43692

The CVE-2024-43692 issue affects Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE (and LX4) where an attacker can directly request a resource sub page to obtain full privileges, effectively bypassing authentication. Affected: MAGLINK LX CONSOLE (versions up to 3.4.2.2.6) and MAGLINK LX4 CONSOL...

PT-2024-30619 · Unknown · Progauge Maglink Lx Console

Name of the Vulnerable Software and Affected Versions: ProGauge MAGLINK LX CONSOLE affected versions not specified Description: An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly. Recommendations: At the moment,...