Dotkliwość: Średnia

The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a length check (exactly 69…

The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data originating from imported crawler…

The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed an HTML…

Błąd w jądrze Linuxa pozwala na pozostawienie wpisów debugfs po wyrejestrowaniu, co może prowadzić do konfliktów.

Wycieki pamięci w sterowniku RTL8723BS mogą prowadzić do wyczerpania zasobów i braku możliwości wysyłania ramek.

Błąd w jądrze Linuxa pozwalał na wystąpienie błędów GPU podczas odzyskiwania, co mogło prowadzić do awarii.

Błąd w jądrze Linux w iwlwifi umożliwia nieprawidłowe przekazywanie argumentów, co może prowadzić do awarii.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() changes the packet…

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-device RX handler…

In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for…

Błąd w jądrze Linuxa dotyczący BPF_REFCOUNT może prowadzić do nieprawidłowego zarządzania pamięcią.

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package

A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges…

A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations configuration option is enabled in glance-api.conf, an…

Błąd w kernelu Linux pozwalał na cichą truncację wartości poll_msec, co mogło prowadzić do wysokiego zużycia CPU.

Błąd w jądrze Linuxa prowadzi do paniki systemu przy przetwarzaniu uszkodzonych ramek PPP.

Błąd w jądrze Linuxa w module mt76 pozwala na przepełnienie bufora przez złośliwe firmware.

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the payload…

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains a flexible array…

In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node() returns -EINTR upon SIGKILL, we should not…

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation argument to…

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an…

Wyciekanie kolejek w jądrze Linuxa przy przekroczeniu limitu backlogu prowadzi do utraty zasobów.

In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone to…

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range() returns either 0 or a negative errno…