Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure
nfs4_alloc_client() allocates an NFSv4.0 callback identifier before it
finishes setting up the client. If any later initialization step fails,
the error path frees…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix out-of-bounds check for cqe->len_list[]
Move index check before element access.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Undertow component.
This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.
This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
The camel-atmosphere-websocket producer selects which connected WebSocket peers a message…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: reset read_slot when reusing r10bio for discard
put_all_bios() always drops devs[i].bio, but it only drops
devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an
r10bio that was previously used for a read,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: Fix bcall rep leak and unbounded peek
rpcrdma_is_bcall() decodes a reply's first words to decide whether
the frame is a backchannel call. Two issues in that decode path
let a short or malformed reply leak the receive…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
indx_insert_into_root() promotes a full resident $INDEX_ROOT into
$INDEX_ALLOCATION and copies all non-last resident root entries into
a newly allocated…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix UAF in tipc_l2_send_msg()
Syzbot reported a slab-use-after-free in ipvlan_hard_header() when
called from tipc_l2_send_msg().
The root cause is that tipc_disable_l2_media() calls synchronize_net()
while b->media_ptr is…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/9p: fix race condition on rdma->state in trans_rdma.c
The rdma->state field is modified without holding req_lock in both
recv_done() and p9_cm_event_handler(), while rdma_request() accesses
the same field under the req_lock…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: access unicast_ttvn skb->data only after skb realloc
The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remove callback IDR entry on client allocation failure
nfs4_alloc_client() allocates an NFSv4.0 callback identifier before it
finishes setting up the client. If any later initialization step fails,
the error path frees…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
qede: fix out-of-bounds check for cqe->len_list[]
Move index check before element access.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Undertow component.
This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.
This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.
The camel-atmosphere-websocket producer selects which connected WebSocket peers a message…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
md/raid10: reset read_slot when reusing r10bio for discard
put_all_bios() always drops devs[i].bio, but it only drops
devs[i].repl_bio when r10_bio->read_slot < 0. If discard reuses an
r10bio that was previously used for a read,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xprtrdma: Fix bcall rep leak and unbounded peek
rpcrdma_is_bcall() decodes a reply's first words to decide whether
the frame is a backchannel call. Two issues in that decode path
let a short or malformed reply leak the receive…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
indx_insert_into_root() promotes a full resident $INDEX_ROOT into
$INDEX_ALLOCATION and copies all non-last resident root entries into
a newly allocated…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code…
Opis źródłowy NVD · EN
Pilne działanie
CVSS 9,8 · EPSS 0,74 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix UAF in tipc_l2_send_msg()
Syzbot reported a slab-use-after-free in ipvlan_hard_header() when
called from tipc_l2_send_msg().
The root cause is that tipc_disable_l2_media() calls synchronize_net()
while b->media_ptr is…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
net/9p: fix race condition on rdma->state in trans_rdma.c
The rdma->state field is modified without holding req_lock in both
recv_done() and p9_cm_event_handler(), while rdma_request() accesses
the same field under the req_lock…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: access unicast_ttvn skb->data only after skb realloc
The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,73 % · rekomendacja wg zapisanej polityki