Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: publish queues before arming timer
inet_frag_create() arms the fragment queue timer before inserting the
queue into the fqdir rhashtable. If the namespace fragment timeout is
zero or negative, the timer can run…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
igbvf: Fix leak in TX DMA error cleanup
If an error is encountered while mapping TX buffers, the driver should
unmap any buffers already mapped for that skb.
Because count is incremented before each frag mapping, it will…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
addrconf_dad_failure() transitions ifp->state from DAD to POSTDAD
via addrconf_dad_end(), which drops ifp->lock on return. The lock
is re-acquired after…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xdp: reject clones that overrun skb_shared_info tailroom
xdpf_clone() clones broadcast copies into a single page and sets
frame_sz to PAGE_SIZE. __xdp_build_skb_from_frame() later treats that
page like a normal XDP frame and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),
but leave needed_headroom and needed_tailroom set to 0.
When the underlying phy_dev (or…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
inet: frags: publish queues before arming timer
inet_frag_create() arms the fragment queue timer before inserting the
queue into the fqdir rhashtable. If the namespace fragment timeout is
zero or negative, the timer can run…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
igbvf: Fix leak in TX DMA error cleanup
If an error is encountered while mapping TX buffers, the driver should
unmap any buffers already mapped for that skb.
Because count is incremented before each frag mapping, it will…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
addrconf_dad_failure() transitions ifp->state from DAD to POSTDAD
via addrconf_dad_end(), which drops ifp->lock on return. The lock
is re-acquired after…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
xdp: reject clones that overrun skb_shared_info tailroom
xdpf_clone() clones broadcast copies into a single page and sets
frame_sz to PAGE_SIZE. __xdp_build_skb_from_frame() later treats that
page like a normal XDP frame and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authenticated attacker with 'reanme' permission to take over the super administrator account via a specially crafted POST request to the affected endpoint renaming…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),
but leave needed_headroom and needed_tailroom set to 0.
When the underlying phy_dev (or…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,51 % · rekomendacja wg zapisanej polityki