Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag.
With allow_tags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Reject Write/Reply chunks with segcount 0
A peer can send a Write or Reply chunk whose segcount field is zero.
xdr_check_write_chunk() only rejects segcount > rc_maxpages, so zero
passes the range check, and…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()
ntfs_lookup_inode_by_name() returns MFT references read from directory
index entries on disk. These values are untrusted, but the function can
currently…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: make system files immutable to prevent corruption
When a system file such as $Bitmap is exposed via show_sys_files and
written from userspace, the volume is corrupted and, because the cluster
allocator scans $Bitmap…
Opis źródłowy NVD · ENCVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag.
With allow_tags, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after THAW returns, so a…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,51 % · rekomendacja wg zapisanej polityki
A command injection vulnerability in TeamViewer Full
Client and Host for Linux prior to version 15.81.5 allows a remote attacker to
execute arbitrary commands in the context of the current user via a specially
crafted URL sent through the out-of-session chat feature. Exploitation requires
user…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 2 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Reject Write/Reply chunks with segcount 0
A peer can send a Write or Reply chunk whose segcount field is zero.
xdr_check_write_chunk() only rejects segcount > rc_maxpages, so zero
passes the range check, and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()
ntfs_lookup_inode_by_name() returns MFT references read from directory
index entries on disk. These values are untrusted, but the function can
currently…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
ntfs: make system files immutable to prevent corruption
When a system file such as $Bitmap is exposed via show_sys_files and
written from userspace, the volume is corrupted and, because the cluster
allocator scans $Bitmap…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,1 · EPSS 0,5 % · rekomendacja wg zapisanej polityki