Lucene search
+L

5719 matches found

OSV
OSV
•added 2024/10/09 3:15 p.m.•10 views

DEBIAN-CVE-2024-47668

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...

4.7CVSS5.6AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/09 3:15 p.m.•32 views

CVE-2024-47668

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...

7.8CVSS0.00169EPSS
SaveExploits0References8
OSV
OSV
•added 2024/10/09 3:15 p.m.•16 views

UBUNTU-CVE-2024-47668

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References25
Cvelist
Cvelist
•added 2024/10/09 2:14 p.m.•50 views

CVE-2024-47668 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...

7.8CVSS0.00169EPSS
SaveExploits0References7
CVE
CVE
•added 2024/10/09 2:14 p.m.•223 views

CVE-2024-47668

CVE-2024-47668 concerns the Linux kernel’s lib/generic-radix-tree.c, where a rare race in __genradix_ptr_alloc() can occur when the tree depth is increased. If a second thread increases the depth first, a preallocated node may be retained and later used, leaving it with a pointer to the old root ...

7.8CVSS6.2AI score0.00169EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
•added 2024/10/09 2:14 p.m.•37 views

CVE-2024-47668

In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Fix rare race in genradixptralloc If we need to increase the tree depth, allocate a new node, and then race with another thread that increased the tree depth before us, we'll still have a preallocated no...

7.8CVSS5.6AI score0.00169EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/10/09 12:00 a.m.•3 views

PT-2024-34059

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0-rc7-BTRFS-ZNS+ Description: The issue is related to the btrfs file system in the Linux kernel. Specifically, it concerns the error propagation of split bios. The function btrfs bbio propagate error is...

7.8CVSS0.00214EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/10/09 12:00 a.m.•12 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition in the generic-radix-tree in the lib component when increasing the depth of the tree, which...

4.7CVSS6.3AI score0.00169EPSS
SaveExploits0References11
Snyk
Snyk
•added 2024/10/08 6:43 p.m.•12 views

Incorrect Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Incorrect Authorization by exposing restricted items in the backend page tree to be viewed by other users, if the mounts pointed to pages restricted for their...

4.3CVSS6.9AI score0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/08 5:57 p.m.•16 views

CVE-2024-47780 Information Disclosure in TYPO3 Page Tree

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected...

3.1CVSS7AI score0.00302EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/08 5:57 p.m.•35 views

CVE-2024-47780 Information Disclosure in TYPO3 Page Tree

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected...

3.1CVSS0.00302EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/08 5:57 p.m.•5 views

CVE-2024-47780

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected...

4.3CVSS0.00302EPSS
SaveExploits0References8
CVE
CVE
•added 2024/10/08 5:57 p.m.•95 views

CVE-2024-47780

TYPO3 CVE-2024-47780 is an information-disclosure vulnerability in the TYPO3 backend page tree. The issue allows backend users to view items for pages they should not access when mounts point to restricted pages or when mounts are absent but pages allow access to “everybody.” The underlying root ...

4.3CVSS5.8AI score0.00302EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/10/08 5:57 p.m.•17 views

CVE-2024-47780 Information Disclosure in TYPO3 Page Tree

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected...

3.1CVSS6.6AI score
SaveExploits0References4
OSV
OSV
•added 2024/10/08 2:37 p.m.•27 views

GHSA-RF5M-H8Q9-9W6Q Information Disclosure in TYPO3 Page Tree

Problem Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Solution Upda...

3.1CVSS3.8AI score0.00302EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2024/10/08 2:37 p.m.•25 views

Information Disclosure in TYPO3 Page Tree

Problem Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected users could not manipulate these pages. Solution Upda...

4.3CVSS7.1AI score0.00302EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•5 views

PT-2024-32812

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 10.4.46 ELTS TYPO3 versions prior to 11.5.40 LTS TYPO3 versions prior to 12.4.21 LTS TYPO3 versions prior to 13.3.1 Description Backend users could see items in the backend page tree without having access if the mounts...

4.3CVSS0.00302EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/08 12:00 a.m.•6 views

CVE-2024-47780: Incorrect Authorization

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to "everybody." However, affected...

4.3CVSS5.8AI score0.00302EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/10/02 1:00 a.m.•21 views

kernel: net: bridge: mst: fix vlan use-after-free

A use-after-free flaw was found in net/bridge/brmst.c in the Linux kernel. This issue may lead to compromised Confidentiality and Integrity, and can crash...

7.8CVSS6.8AI score0.00257EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•17 views

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to a panic state if extendtree is not created. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.0024EPSS
SaveExploits0References20Affected Software3
Rows per page
Query Builder