5666 matches found
CVE-2024-55642: Improper Locking
In the Linux kernel, the following vulnerability has been resolved: block: Prevent potential deadlocks in zone write plug error recovery Zone write plugging for handling writes to zones of a zoned block device always execute a zone report whenever a write BIO to a zone fails. The intent of this i...
go -- multiple vulnerabilities
The Go project reports: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. net/http: sensitive headers incorrectly sent after...
CVE-2024-37103
Cross-Site Request Forgery CSRF vulnerability in Rara Theme Education Zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through 1.3.4...
CVE-2024-37103
Cross-Site Request Forgery CSRF vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through = 1.3.4...
CVE-2024-37103 WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through = 1.3.4...
WordPress plugin Education Zone 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2025-2459
Name of the Vulnerable Software and Affected Versions: Rara Theme Education Zone versions 1.3.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the...
CVE-2024-37103: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through = 1.3.4...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue in the nfscommon subsystem that incorrectly holds an RCU in the RCU read-side critical zone...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. Bug...
PT-2025-3136
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.5 Description A potential deadlock issue has been identified in the Linux kernel's zone write plugging code. This issue occurs when a device queue freeze is initiated while BIOs are still plugged in a zone...
SUSE CVE-2024-53113
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...
AZL-54188 CVE-2024-53113 affecting package kernel for versions less than 5.15.176.3-1
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...
UBUNTU-CVE-2024-53113
In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer dereference in allocpagesbulknoprof We triggered a NULL pointer dereference for ac.preferredzoneref-zone in allocpagesbulknoprof when the task is migrated between cpusets. When cpuset is enabled, in...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the mlx5tcctentryaddrule function in the net/mlx5e component, where the zonerule-attr is used...
PT-2025-3609
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The Linux kernel has a vulnerability that can cause an infinite loop in the throttle direct reclaim function. This issue arises from the zone reclaimable pages function, which does not account...
Exploit for Cross-site Scripting in Sensaphone Web600_Firmware
SENSAPHONE VULNERABILITY DISCLOSURE Summary In mid-Sep...
OESA-2024-2446 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free in dozonefinish Shinichiro reported the following use-after-free triggered by the device replace operation in fstests btrfs/070...
Linux kernel DoS
The vulnerability of the zoned kernel component in the Linux operating system is related to improper locking of resources in the btrfszoneactivate function. Exploiting this vulnerability can allow an attacker to cause a service failure...
edna Chat Center Improper Access Control
The vulnerability of the edna Chat Center’s customer request processing system is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request with a client identifier from ...