Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
spi: Fix DMA mapping ownership on partial map failure
If RX mapping fails after TX mapping succeeds, __spi_map_msg() unmaps
TX but leaves tx_sg_mapped set. If TX mapping fails on a later
transfer, mappings created for earlier…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically.
The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
xprtsock replaces and restores sk->sk_data_ready and
sk->sk_write_space on live sockets with plain stores, and
xs_udp_do_set_buffer_size() invokes…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
qla_nvme_ls_reject_iocb() allocates from and advances the request ring
through __qla2x00_alloc_iocbs() (which assumes the hardware_lock is
held) and…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
spi: Fix DMA mapping ownership on partial map failure
If RX mapping fails after TX mapping succeeds, __spi_map_msg() unmaps
TX but leaves tx_sg_mapped set. If TX mapping fails on a later
transfer, mappings created for earlier…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically.
The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
xprtsock replaces and restores sk->sk_data_ready and
sk->sk_write_space on live sockets with plain stores, and
xs_udp_do_set_buffer_size() invokes…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
qla_nvme_ls_reject_iocb() allocates from and advances the request ring
through __qla2x00_alloc_iocbs() (which assumes the hardware_lock is
held) and…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,62 % · rekomendacja wg zapisanej polityki