4440 matches found
CVE-2024-47089 Unauthorized Transaction Manipulation Vulnerability
This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and...
ROS-20240919-02
Vulnerability of the reweightentity function of the sched component of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to impact confidentiality, integrity, and availability. A...
Apex Softcell LD Geo 安全漏洞
Apex Softcell LD Geo is an application from Apex Softcell. Apex Softcell LD Geo has a security vulnerability that stems from improper validation of transaction token IDs in the API endpoint...
CVE-2023-28451
An issue was discovered in Technitium 11.0.2. There is a vulnerability called BadDNS in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS denial of service for normal resolution. The effects of an exploit would be widespread and highly impactful, becaus...
CVE-2024-46751
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUGON when 0 reference count at btrfslookupextentinfo Instead of doing a BUGON handle the error by returning -EUCLEAN, aborting the transaction and logging an error message...
DEBIAN-CVE-2024-46751
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUGON when 0 reference count at btrfslookupextentinfo Instead of doing a BUGON handle the error by returning -EUCLEAN, aborting the transaction and logging an error message...
DEBIAN-CVE-2024-46752
In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUGON with error handling at updaterefforcow Instead of a BUGON just return an error, log an error message and abort the transaction in case we find an extent buffer belonging to the relocation tree that doesn't ha...
AZL-49734 CVE-2024-46751 affecting package kernel for versions less than 5.15.184.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUGON when 0 reference count at btrfslookupextentinfo Instead of doing a BUGON handle the error by returning -EUCLEAN, aborting the transaction and logging an error message...
UBUNTU-CVE-2024-46752
In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUGON with error handling at updaterefforcow Instead of a BUGON just return an error, log an error message and abort the transaction in case we find an extent buffer belonging to the relocation tree that doesn't ha...
CVE-2024-46751
CVE-2024-46751 affects the Linux kernel btrfs path where a 0 reference count could trigger a BUG_ON() in btrfs_lookup_extent_info(). The vulnerability arises from the incorrect BUG_ON() and is fixed by changing the code to return -EUCLEAN, abort the transaction, and log an error instead. This red...
PT-2024-32403 · Unknown · Apex Softcell Ld Geo
Name of the Vulnerable Software and Affected Versions: Apex Softcell LD Geo affected versions not specified Description: This issue exists due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this by manipulating the transactio...
CBL Mariner 2.0 Security Update: postgresql (CVE-2024-7348)
The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-7348 advisory. - Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execu...
SAP Student Life Cycle Management 安全漏洞
SAP Student Life Cycle Management is a student life cycle management system from SAP, Germany. A security vulnerability exists in SAP Student Life Cycle Management, which results from an authenticated attacker with elevated privileges being able to use SLCM transaction functions to which access...
SUSE CVE-2024-44963
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...
DEBIAN-CVE-2024-44963
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...
AZL-49953 CVE-2024-44963 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...
AZL-49924 CVE-2024-44963 affecting package kernel for versions less than 6.6.64.2-9
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...
UBUNTU-CVE-2024-44963
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON when freeing tree block after error When freeing a tree block, at btrfsfreetreeblock, if we fail to create a delayed reference we don't deal with the error and just do a BUGON. The error most likely to happen ...
CVE-2024-45587
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...
CVE-2024-45587
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...