2985 matches found
PT-2024-25803
Name of the Vulnerable Software and Affected Versions Deno versions prior to 1.43 Description The Deno sandbox may be unexpectedly weakened by allowing file read/write access to privileged files in various locations on Unix and Windows platforms. For example, reading /proc/self/environ may provid...
Desdev DedeCMS 跨站请求伪造漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
PT-2024-31844
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description A vulnerability has been found in DedeCMS, affecting an unknown part of the file /src/dede/sys group add.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...
PT-2024-31843 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A vulnerability was found in DedeCMS, affecting some unknown functionality of the file /src/dede/sys info.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...
CVE-2023-34277
D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this...
D-Link DIR-X3260 安全漏洞
D-Link DIR-X3260 is a Wi-Fi 6 router from China-based D-Link. A security vulnerability exists in the D-Link DIR-X3260 that stems from a remote code execution vulnerability in the SetSysEmailSettings SMTPServerAddress command injection...
PT-2024-22450 · Microworld Technologies · Escan Antivirus
Name of the Vulnerable Software and Affected Versions: MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 Description: A kernel handle leak issue in ProcObsrvesx.sys could allow privilege escalation for low-privileged users. Recommendations: For version 4.0.0.49, consider updating to a...
Fedora 40 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-9974808629)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-9974808629 advisory. Update rust-vmm components and their consumers to address CVE-2023-50711 Tenable has extracted the preceding description block directly from the Fedora...
kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier
A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...
kernel: sched/membarrier: reduce the ability to hammer on sys_membarrier
A flaw was found in sysmembarrier in the Linux kernel in sched/membarrier in how a user calls it at too high of a frequency. This flaw allows a local user to saturate the machine...
The vulnerability of the driver rndismp6.sys in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the rndismp6.sys driver in Windows operating systems is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the driver rndismp6.sys in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the rndismp6.sys driver in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-31648
A Cross Site Scripting (XSS) vulnerability exists in Insurance Management System v1.0 . Remote attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Category Name parameter at the /core/new_category2 endpoint. This vulnerability is caused by Improper Control ...
CVE-2024-3721: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects some unknown processing of the file /device.rsp?opt=sys&cmd=SOSTREAMAX. The manipulation of the argument mdb/mdc leads to os command injection. The attack may be initiated remotely...
Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files
"Test files" associated with the XZ Utils backdoor have made their way to a Rust crate known as liblzma-sys, new findings from Phylum reveal. liblzma-sys, which has been downloaded over 21,000 times to date, provides Rust developers with bindings to the liblzma implementation, an underlying libra...
The vulnerability of the vmm-sys-util module, related to writing beyond buffer boundaries, allows an attacker to cause a service failure or exert other effects.
The vulnerability of the vmm-sys-util module set is related to the lack of checks to ensure that the length stored in the header corresponds to the actual length of the flexible array. Exploiting this vulnerability could allow a remote attacker to cause service failures or exert other adverse...
ROS-20240410-10
Vulnerability of vmm-sys-util module set is related to the lack of checking if the length, stored in the header matches the length of the flexible array. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...
CVE-2024-26253
Windows rndismp6.sys Remote Code Execution Vulnerability...
