Luka w Mahara umożliwia dostęp do zawartości z innych sekcji tekstowych.
Luka w Mahara umożliwia dostęp do zawartości z innych sekcji tekstowych.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
KATALOG INFORMACJI
Podatności
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Filtry katalogu · zakres, producent, rekomendacja
In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper…
In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs_rl_realloc() and ntfs_rl_realloc_nofail().
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in…
In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file_hash() digests the first LOCKD_FH_HASH_SIZE bytes of nfs_fh.data when bucketing nlm_files[], independent of fh.size. Commit 3de744ee4e45 ("lockd: Use xdrgen…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe…
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live inodes since: commit 519b078998ce ("fs/ntfs3: Exclude call make_bad_inode for live nodes.") The WARN_ON was added when it…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix…
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nf_flow_ip6_tunnel_proto() to use pskb_may_pull() instead of skb_header_pointer() to ensure the outer IPv6 header is in the skb headroom, which is required for…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in…
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check for iph->ihl field in nf_flow_ip4_tunnel_proto() before using it to compute the header size, avoiding out-of-bounds access with malformed IP…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The…
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dst_entry is provided to check the skb headroom and to set the iph->frag_off field.…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP…
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify…
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfs_index_block_inconsisent() to perform stricter validation of INDEX_HEADER geometry in INDX blocks, and update ntfs_lookup_inode_by_name() to use that function to…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When…
In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize() cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup…
In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that there is enough space in the EA entry before accessing the next_entry_offset field of the EA entry.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and…
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and ntfs_external_attr_find() check that generic resident attribute values fit in their attribute records and that fixed-size resident values are large enough. For…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In…
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decompress(), attr_end points one byte past the end of the attribute record: attr_end = (u8 *)attr + le32_to_cpu(attr->length); The two…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header…
In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfs_ir_reparent() moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident…
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEX_ROOT values carry index header fields that callers consume after lookup. Some callers already validate parts of the layout before walking entries, but those…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries…
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd w jądrze Linuxa pozwala na użycie po zwolnieniu pamięci, co prowadzi do awarii.
Błąd w jądrze Linuxa pozwala na użycie po zwolnieniu pamięci, co prowadzi do awarii.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Przepełnienie bufora w microtar umożliwia zdalne wykonanie kodu.
Przepełnienie bufora w microtar umożliwia zdalne wykonanie kodu.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd zapisu poza granicami w nanoMODBUS umożliwia zdalne wykonanie kodu.
Błąd zapisu poza granicami w nanoMODBUS umożliwia zdalne wykonanie kodu.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd odczytu poza zakresem w nanoMODBUS umożliwia zapis wskaźnika, co może prowadzić do nieprzewidzianych skutków.
Błąd odczytu poza zakresem w nanoMODBUS umożliwia zapis wskaźnika, co może prowadzić do nieprzewidzianych skutków.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Brak wsparcia dla offloadu tuneli IPIP w jądrze Linux może prowadzić do nieefektywnego zarządzania ruchem.
Brak wsparcia dla offloadu tuneli IPIP w jądrze Linux może prowadzić do nieefektywnego zarządzania ruchem.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find.
Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach-time validator dsu_validate_header checks the header scalars and region layout against the file size, but does not validate the array contents it…
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts.
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Błąd w jądrze Linuxa w netfs może prowadzić do uszkodzenia danych przy aktualizacji rozmiarów.
Błąd w jądrze Linuxa w netfs może prowadzić do uszkodzenia danych przy aktualizacji rozmiarów.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
Claude Code is an agentic coding tool.
Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.
- CVSS
- 9,8
- EPSS
- 0,55 %
- Poprawka
- Status poprawki nieustalony
- Publikacja
- Aktualizacja NVD
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Luka w Mahara umożliwia dostęp do zawartości z innych sekcji tekstowych. | Luka w Mahara umożliwia dostęp do zawartości z innych sekcji tekstowych. |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper… | In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfs_rl_realloc() and ntfs_rl_realloc_nofail(). |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in… | In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file_hash() digests the first LOCKD_FH_HASH_SIZE bytes of nfs_fh.data when bucketing nlm_files[], independent of fh.size. Commit 3de744ee4e45 ("lockd: Use xdrgen… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe… | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call _ntfs_bad_inode() when failing to rename It is safe to call _ntfs_bad_inode on live inodes since: commit 519b078998ce ("fs/ntfs3: Exclude call make_bad_inode for live nodes.") The WARN_ON was added when it… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix… | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Fix nf_flow_ip6_tunnel_proto() to use pskb_may_pull() instead of skb_header_pointer() to ensure the outer IPv6 header is in the skb headroom, which is required for… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in… | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Add sanity check for iph->ihl field in nf_flow_ip4_tunnel_proto() before using it to compute the header size, avoiding out-of-bounds access with malformed IP… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The… | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: support IPIP tunnel with direct xmit The combination of IPIP tunnel with direct xmit, eg. bridge device, breaks because no dst_entry is provided to check the skb headroom and to set the iph->frag_off field.… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP… | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify… | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index block header more strictly Modify ntfs_index_block_inconsisent() to perform stricter validation of INDEX_HEADER geometry in INDX blocks, and update ntfs_lookup_inode_by_name() to use that function to… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When… | In the Linux kernel, the following vulnerability has been resolved: ntfs: not change 0-byte $DATA attribute to non-resident When ntfs_resident_attr_resize() cannot grow a resident attribute in place, it retries after converting other resident attributes to non-resident to free space in the MFT… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup… | In the Linux kernel, the following vulnerability has been resolved: ntfs: add bounds check before accessing EA entries in ntfs_ea_lookup and ntfs_listxattr, this verifies that there is enough space in the EA entry before accessing the next_entry_offset field of the EA entry. |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and… | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfs_attr_find() and ntfs_external_attr_find() check that generic resident attribute values fit in their attribute records and that fixed-size resident values are large enough. For… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In… | In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfs_mapping_pairs_decompress(), attr_end points one byte past the end of the attribute record: attr_end = (u8 *)attr + le32_to_cpu(attr->length); The two… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header… | In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfs_ir_reparent() moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident… | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate resident index root values on lookup Resident $INDEX_ROOT values carry index header fields that callers consume after lookup. Some callers already validate parts of the layout before walking entries, but those… |
W tym tygodniu | 9,8 | 0,55 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries… | In the Linux kernel, the following vulnerability has been resolved: ntfs: validate index entries on reading Validate index entries immediately after reading an index root or index block from disk. This eliminates repeated checks in lookup and readdir, and reduce the risk of missing checks in… |
W tym tygodniu | 9,8 | 0,55 % | ||
| Błąd w jądrze Linuxa pozwala na użycie po zwolnieniu pamięci, co prowadzi do awarii. | Błąd w jądrze Linuxa pozwala na użycie po zwolnieniu pamięci, co prowadzi do awarii. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Przepełnienie bufora w microtar umożliwia zdalne wykonanie kodu. | Przepełnienie bufora w microtar umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Błąd zapisu poza granicami w nanoMODBUS umożliwia zdalne wykonanie kodu. | Błąd zapisu poza granicami w nanoMODBUS umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Błąd odczytu poza zakresem w nanoMODBUS umożliwia zapis wskaźnika, co może prowadzić do nieprzewidzianych skutków. | Błąd odczytu poza zakresem w nanoMODBUS umożliwia zapis wskaźnika, co może prowadzić do nieprzewidzianych skutków. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Brak wsparcia dla offloadu tuneli IPIP w jądrze Linux może prowadzić do nieefektywnego zarządzania ruchem. | Brak wsparcia dla offloadu tuneli IPIP w jądrze Linux może prowadzić do nieefektywnego zarządzania ruchem. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu_find. The attach-time validator dsu_validate_header checks the header scalars and region layout against the file size, but does not validate the array contents it… |
W tym tygodniu | 9,8 | 0,55 % | ||
| Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Błąd w jądrze Linuxa w netfs może prowadzić do uszkodzenia danych przy aktualizacji rozmiarów. | Błąd w jądrze Linuxa w netfs może prowadzić do uszkodzenia danych przy aktualizacji rozmiarów. |
W tym tygodniu | 9,8 | 0,55 % | ||
| Claude Code is an agentic coding tool. | Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31. |
W tym tygodniu | 9,8 | 0,55 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.