Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
HID: core: Fix OOB read in hid_get_report for numbered reports
When a caller passes a size of 0 to hid_report_raw_event() for a
numbered report, the function originally called hid_get_report() before
performing any size…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: fix OOB access from firmware tx status queue ID
ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a
4-bit hardware field (0-15), but the txq array only has
ATH9K_NUM_TX_QUEUES (10) entries. A qid >=…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
cgw_csum_crc8_rel() correctly computes bounds-safe indices via calc_idx():
int from = calc_idx(crc8->from_idx, cf->len);
int to = calc_idx(crc8->to_idx, cf->len);…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/roles/{roleId}/menus. Low-privileged users such as the GUEST test account can grant all permissions to their own role,…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the…
Opis źródłowy NVD · ENCVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
HID: core: Fix OOB read in hid_get_report for numbered reports
When a caller passes a size of 0 to hid_report_raw_event() for a
numbered report, the function originally called hid_get_report() before
performing any size…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: fix OOB access from firmware tx status queue ID
ath_tx_edma_tasklet() accesses sc->tx.txq[ts.qid] where ts.qid is a
4-bit hardware field (0-15), but the txq array only has
ATH9K_NUM_TX_QUEUES (10) entries. A qid >=…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
cgw_csum_crc8_rel() correctly computes bounds-safe indices via calc_idx():
int from = calc_idx(crc8->from_idx, cf->len);
int to = calc_idx(crc8->to_idx, cf->len);…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/roles/{roleId}/menus. Low-privileged users such as the GUEST test account can grant all permissions to their own role,…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the…
Opis źródłowy NVD · EN
Obserwuj
CVSS 8,8 · EPSS 0,41 % · rekomendacja wg zapisanej polityki