KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Cross-site request forgery w IBM DataPower Gateway pozwala na wykonanie nieautoryzowanych działań.
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race…
Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu.
Błąd w jądrze Linuxa pozwalał gościowi na nieautoryzowany dostęp do rejestru ZCR_EL2, co mogło prowadzić do naruszenia bezpieczeństwa.
Brak walidacji w rvu_mbox_handler_rep_event_notify w jądrze Linuxa pozwala na zapis poza granicami pamięci.
Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy.
Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP.
Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi.
The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. **fork()s** a child process 2. **setns()** into the target container's PID and mount namespaces 3. **fchdir()**…
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with page_size() and records that length in dma_info->size. For a compound folio page_size() is PAGE_SIZE <<…
In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock, racing the unlocked IPv6 route add/delete that mutate the list…
In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __nexthop_replace_notify() walk nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock.…
In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content…
In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's…
Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, after running a per-object-type cleanup. The cleanup switch handled only K_OBJ_MSGQ and K_OBJ_STACK; there was no…
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds…
Błąd w Linux kernel prowadzi do niezrównoważonego odblokowania w drm_gpusvm_scan_mm.
Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu.
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_mdev_hot_unplug_cfg() function uses the return value of bitmap_andnot() to determine whether the guest APCB needs to be updated. However,…
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting last_vpid=0 when allocating vpid02. nested_vmx_transition_tlb_flush() will always detect a VPID change on first VM-Enter…
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-device MSI permission table: vdev->msi_perm = kmalloc_obj(struct perm_bits, GFP_KERNEL_ACCOUNT); if…
Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that…
Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów.
Błąd w jądrze Linuxa w funkcji iommu_completion_wait umożliwia wykorzystanie po zwolnieniu pamięci.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Cross-site request forgery w IBM DataPower Gateway pozwala na wykonanie nieautoryzowanych działań. | Cross-site request forgery w IBM DataPower Gateway pozwala na wykonanie nieautoryzowanych działań. |
Obserwuj | 8,8 | 0,17 % | ||
| Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. | Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES… | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue eviction/suspension MES (Micro Engine Scheduler) does not perform heavy-weight TLB invalidation after unmapping queues, unlike HWS which does this automatically. This causes a race… |
Obserwuj | 8,8 | 0,17 % | ||
| Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu. | Przepełnienie bufora w IBM AIX i PowerVM VIOS umożliwia lokalnemu atakującemu wykonanie dowolnego kodu. |
Obserwuj | 8,8 | 0,17 % | ||
| Błąd w jądrze Linuxa pozwalał gościowi na nieautoryzowany dostęp do rejestru ZCR_EL2, co mogło prowadzić do naruszenia bezpieczeństwa. | Błąd w jądrze Linuxa pozwalał gościowi na nieautoryzowany dostęp do rejestru ZCR_EL2, co mogło prowadzić do naruszenia bezpieczeństwa. |
Obserwuj | 8,8 | 0,17 % | ||
| Brak walidacji w rvu_mbox_handler_rep_event_notify w jądrze Linuxa pozwala na zapis poza granicami pamięci. | Brak walidacji w rvu_mbox_handler_rep_event_notify w jądrze Linuxa pozwala na zapis poza granicami pamięci. |
Obserwuj | 8,8 | 0,17 % | ||
| Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy. | Luka w Cilium umożliwia lokalnemu atakującemu dostęp do poufnych danych Envoy. |
Obserwuj | 8,8 | 0,17 % | ||
| Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP. | Błąd w OpenSIPS umożliwia zdalne wywołanie awarii serwera przez złośliwe SDP. |
Obserwuj | 8,7 | 0,67 % | ||
| Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi. | Błąd logiczny w stoatchat umożliwia zdalne pobranie całej historii wiadomości, co prowadzi do odmowy usługi. |
Obserwuj | 8,7 | 0,67 % | ||
| The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting.… | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. **fork()s** a child process 2. **setns()** into the target container's PID and mount namespaces 3. **fchdir()**… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large… | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: fix mismatched DMA unmap size for large folios Device-private THP migration maps migration buffers with page_size() and records that length in dma_info->size. For a compound folio page_size() is PAGE_SIZE <<… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in… | In the Linux kernel, the following vulnerability has been resolved: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock, racing the unlocked IPv6 route add/delete that mutate the list… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and… | In the Linux kernel, the following vulnerability has been resolved: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and __nexthop_replace_notify() walk nh->f6i_list during an RTNL-serialized nexthop replace without holding nh->lock.… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from… | In the Linux kernel, the following vulnerability has been resolved: iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmabuf invalidation callbacks. Don't destroy any of the pages content… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory… | In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif_rxq_cleanup_unlease() tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's… |
Obserwuj | 8,8 | 0,17 % | ||
| Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data))… | Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, after running a per-object-type cleanup. The cleanup switch handled only K_OBJ_MSGQ and K_OBJ_STACK; there was no… |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO… | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds… |
Obserwuj | 8,8 | 0,17 % | ||
| Błąd w Linux kernel prowadzi do niezrównoważonego odblokowania w drm_gpusvm_scan_mm. | Błąd w Linux kernel prowadzi do niezrównoważonego odblokowania w drm_gpusvm_scan_mm. |
Obserwuj | 8,8 | 0,17 % | ||
| Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu. | Uszkodzenie pamięci podczas dekodowania uszkodzonych plików danych satelitarnych może prowadzić do zdalnego wykonania kodu. |
Obserwuj | 8,8 | 0,17 % | ||
| In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain… | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed The vfio_ap_mdev_hot_unplug_cfg() function uses the return value of bitmap_andnot() to determine whether the guest APCB needs to be updated. However,… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is… | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always flush vpid02 on first use Make sure vpid02 is always flushed on first use by setting last_vpid=0 when allocating vpid02. nested_vmx_transition_tlb_flush() will always detect a VPID change on first VM-Enter… |
Obserwuj | 8,8 | 0,16 % | ||
| In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init… | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure vfio_msi_cap_len() lazily allocates the per-device MSI permission table: vdev->msi_perm = kmalloc_obj(struct perm_bits, GFP_KERNEL_ACCOUNT); if… |
Obserwuj | 8,8 | 0,16 % | ||
| Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to… | Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that… |
Obserwuj | 8,7 | 0,66 % | ||
| Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów. | Wykorzystanie złośliwego ramowania HTTP/2 w Apache Traffic Server może prowadzić do awarii lub wyczerpania zasobów. |
Obserwuj | 8,7 | 0,66 % | ||
| Błąd w jądrze Linuxa w funkcji iommu_completion_wait umożliwia wykorzystanie po zwolnieniu pamięci. | Błąd w jądrze Linuxa w funkcji iommu_completion_wait umożliwia wykorzystanie po zwolnieniu pamięci. |
Obserwuj | 8,8 | 0,16 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.