KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Przepełnienie bufora w DBI dla Perla umożliwia zdalne wykonanie kodu przez atakującego.
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.
In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=, incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1).
In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on a bnxt machine (and also crashes in NIPA). It seems that the bug is an underflow in bnxt_rx_multi_page_skb,…
In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done. An earlier patch by Gui-Dong Han…
In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entry(null_dst) to mark that the destination should not be changed after the transformation. This dst is stored in the IOAM lwt state and may be passed to…
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got…
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking the subrequest list in retry as there's a possibility of seeing a subreq that's just been added by the application thread.
In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt…
In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call…
Błąd w CPSD CryptoPro Secure Disk umożliwia wykonanie niepodpisanego kodu z tymczasowych systemów plików.
Błąd w jądrze Linux w iptfs_skb_add_frags prowadzi do uszkodzenia pamięci jądra.
Błąd w jądrze Linuxa w tcp_ao_destroy_sock umożliwia odczytanie zwolnionego wskaźnika, co prowadzi do potencjalnego wycieku pamięci.
Wykorzystanie podatnej wersji libwebp w Image::WebP umożliwia atak na niezaufane obrazy WebP.
Błąd w jądrze Linux umożliwia atakującym wywołanie nieprzewidzianych zachowań w netfilter.
Błąd w jądrze Linux umożliwia kontynuację generowania subżądań mimo ich niepowodzenia.
Błąd w jądrze Linuxa w netfs pozwalał na nieprawidłowe zarządzanie subżądaniami, co mogło prowadzić do awarii.
Odczyt niezinicjalizowanego adresu fragmentu w airoha_dev_xmit może prowadzić do błędów strony.
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be…
Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capability check for role…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Przepełnienie bufora w DBI dla Perla umożliwia zdalne wykonanie kodu przez atakującego. | Przepełnienie bufora w DBI dla Perla umożliwia zdalne wykonanie kodu przez atakującego. |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge()… | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed. |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in… | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages. |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n =… | In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx bounds check sets n = NUMFDPC + 1 but used > instead of >=, incorrectly accepting fdp_idx when it equals n (i.e. NUMFDPC + 1). |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test… | In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on a bnxt machine (and also crashes in NIPA). It seems that the bug is an underflow in bnxt_rx_multi_page_skb,… |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver… | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with completion The driver previously used a waitqueue along with an explicit request_done flag, but without proper barriers around request_done. An earlier patch by Gui-Dong Han… |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy… | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entry(null_dst) to mark that the destination should not be changed after the transformation. This dst is stored in the IOAM lwt state and may be passed to… |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object… | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got… |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the… | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest list Fix the barriering used when walking the subrequest list in retry as there's a possibility of seeing a subreq that's just been added by the application thread. |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS… | In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping-pairs LCN accumulator overflow The NTFS mapping-pairs parser accumulates relative LCN deltas in a signed integer. A corrupted attribute can drive that addition past the representable range. One corrupt… |
W tym tygodniu | 9,8 | 0,65 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers… | In the Linux kernel, the following vulnerability has been resolved: net: mana: Sync page pool RX frags for CPU MANA allocates RX buffers from page pool fragments when frag_count is greater than 1. In that case the buffers remain DMA mapped by page pool and the RX completion path does not call… |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w CPSD CryptoPro Secure Disk umożliwia wykonanie niepodpisanego kodu z tymczasowych systemów plików. | Błąd w CPSD CryptoPro Secure Disk umożliwia wykonanie niepodpisanego kodu z tymczasowych systemów plików. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w jądrze Linux w iptfs_skb_add_frags prowadzi do uszkodzenia pamięci jądra. | Błąd w jądrze Linux w iptfs_skb_add_frags prowadzi do uszkodzenia pamięci jądra. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w jądrze Linuxa w tcp_ao_destroy_sock umożliwia odczytanie zwolnionego wskaźnika, co prowadzi do potencjalnego wycieku pamięci. | Błąd w jądrze Linuxa w tcp_ao_destroy_sock umożliwia odczytanie zwolnionego wskaźnika, co prowadzi do potencjalnego wycieku pamięci. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Wykorzystanie podatnej wersji libwebp w Image::WebP umożliwia atak na niezaufane obrazy WebP. | Wykorzystanie podatnej wersji libwebp w Image::WebP umożliwia atak na niezaufane obrazy WebP. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w jądrze Linux umożliwia atakującym wywołanie nieprzewidzianych zachowań w netfilter. | Błąd w jądrze Linux umożliwia atakującym wywołanie nieprzewidzianych zachowań w netfilter. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w jądrze Linux umożliwia kontynuację generowania subżądań mimo ich niepowodzenia. | Błąd w jądrze Linux umożliwia kontynuację generowania subżądań mimo ich niepowodzenia. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Błąd w jądrze Linuxa w netfs pozwalał na nieprawidłowe zarządzanie subżądaniami, co mogło prowadzić do awarii. | Błąd w jądrze Linuxa w netfs pozwalał na nieprawidłowe zarządzanie subżądaniami, co mogło prowadzić do awarii. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Odczyt niezinicjalizowanego adresu fragmentu w airoha_dev_xmit może prowadzić do błędów strony. | Odczyt niezinicjalizowanego adresu fragmentu w airoha_dev_xmit może prowadzić do błędów strony. |
W tym tygodniu | 9,8 | 0,65 % | ||
| A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. | A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be… |
Pilne działanie | 9,8 | 0,65 % | ||
| Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
W tym tygodniu | 9,8 | 0,65 % | ||
| Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network. | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network. |
W tym tygodniu | 9,8 | 0,65 % | ||
| The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without… | The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime. |
W tym tygodniu | 9,8 | 0,65 % | ||
| The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege… | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capability check for role… |
W tym tygodniu | 9,8 | 0,65 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.