KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
Obejście ograniczeń w Quest KACE umożliwia przeprowadzenie ataku typu brute-force.
WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwords using PHP's rand(). rand() is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or…
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.
Błąd w jądrze Linuxa pozwala na wykorzystanie połączenia po zwolnieniu pamięci, co prowadzi do niebezpieczeństwa.
Wykonanie zdalnego kodu w Slah CMS umożliwia złośliwe wprowadzenie danych w funkcji session().
In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCP_Server_Info::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in…
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parse_pdu_itt A transport that implements parse_pdu_itt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if (i >=…
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn->close_lru after its final CLOSE keeps its last closed stateid in oo_last_closed_stid, holding only a raw pointer to its nfs4_client. The…
Błąd w obliczaniu długości bufora XDR w nfsd umożliwia zdalne pisanie poza przydzieloną pamięcią.
Przepełnienie bufora w Ceph umożliwia zdalne wykonanie kodu przez złośliwego MDS.
Błąd w libceph w jądrze Linux umożliwia zapis poza granicami pamięci, co może prowadzić do awarii.
Błąd w funkcji xdr_buf_trim w jądrze Linux może prowadzić do niebezpiecznego przepełnienia bufora.
Błąd w gss_unwrap_resp_priv w jądrze Linux umożliwia odczyt poza granicami pamięci.
Błąd w gss_krb5_unwrap_v2 w jądrze Linux prowadzi do odczytu poza granicami pamięci.
Błąd w jądrze Linuxa umożliwia zdalne wywołanie błędnego transportu w protokole SCTP.
Przepełnienie bufora w jądrze Linuxa może prowadzić do awarii systemu.
In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker() in cls_lock_client.c contains three unsafe decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads: 1.…
In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pg_temp, primary_temp, pg_upmap, and pg_upmap_items parts that don't exist, i.e.,…
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_mds_request` pointer in `current->journal_info` while filling the inode and dentry cache from an MDS reply. An allocation in this section…
In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmp_send(). However, IPCB(skb)->opt still describes the…
In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run…
In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will…
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session… | An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID. |
W tym tygodniu | 9,8 | 0,52 % | ||
| IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could… | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write. |
W tym tygodniu | 9,8 | 0,52 % | ||
| Obejście ograniczeń w Quest KACE umożliwia przeprowadzenie ataku typu brute-force. | Obejście ograniczeń w Quest KACE umożliwia przeprowadzenie ataku typu brute-force. |
W tym tygodniu | 9,8 | 0,52 % | ||
| WBCE CMS is a content management system. | WBCE CMS is a content management system. Versions 1.6.4 and below use function GenerateRandomPassword() to create passwords using PHP's rand(). rand() is not cryptographically secure, which allows password sequences to be predicted or brute-forced. This can lead to user account compromise or… |
Pilne działanie | 9,8 | 0,52 % | ||
| An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute… | An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code. |
W tym tygodniu | 9,8 | 0,52 % | ||
| Błąd w jądrze Linuxa pozwala na wykorzystanie połączenia po zwolnieniu pamięci, co prowadzi do niebezpieczeństwa. | Błąd w jądrze Linuxa pozwala na wykorzystanie połączenia po zwolnieniu pamięci, co prowadzi do niebezpieczeństwa. |
W tym tygodniu | 9,8 | 0,52 % | ||
| Wykonanie zdalnego kodu w Slah CMS umożliwia złośliwe wprowadzenie danych w funkcji session(). | Wykonanie zdalnego kodu w Slah CMS umożliwia złośliwe wprowadzenie danych w funkcji session(). |
W tym tygodniu | 9,8 | 0,52 % | ||
| In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of… | In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCP_Server_Info::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in… |
W tym tygodniu | 9,8 | 0,52 % | ||
| In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parse_pdu_itt A… | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from parse_pdu_itt A transport that implements parse_pdu_itt hands libiscsi an index taken from the PDU, and both lookups bound it from above only: if (i >=… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An… | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping An nfs4_openowner left on nn->close_lru after its final CLOSE keeps its last closed stateid in oo_last_closed_stid, holding only a raw pointer to its nfs4_client. The… |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w obliczaniu długości bufora XDR w nfsd umożliwia zdalne pisanie poza przydzieloną pamięcią. | Błąd w obliczaniu długości bufora XDR w nfsd umożliwia zdalne pisanie poza przydzieloną pamięcią. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Przepełnienie bufora w Ceph umożliwia zdalne wykonanie kodu przez złośliwego MDS. | Przepełnienie bufora w Ceph umożliwia zdalne wykonanie kodu przez złośliwego MDS. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w libceph w jądrze Linux umożliwia zapis poza granicami pamięci, co może prowadzić do awarii. | Błąd w libceph w jądrze Linux umożliwia zapis poza granicami pamięci, co może prowadzić do awarii. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w funkcji xdr_buf_trim w jądrze Linux może prowadzić do niebezpiecznego przepełnienia bufora. | Błąd w funkcji xdr_buf_trim w jądrze Linux może prowadzić do niebezpiecznego przepełnienia bufora. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w gss_unwrap_resp_priv w jądrze Linux umożliwia odczyt poza granicami pamięci. | Błąd w gss_unwrap_resp_priv w jądrze Linux umożliwia odczyt poza granicami pamięci. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w gss_krb5_unwrap_v2 w jądrze Linux prowadzi do odczytu poza granicami pamięci. | Błąd w gss_krb5_unwrap_v2 w jądrze Linux prowadzi do odczytu poza granicami pamięci. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Błąd w jądrze Linuxa umożliwia zdalne wywołanie błędnego transportu w protokole SCTP. | Błąd w jądrze Linuxa umożliwia zdalne wywołanie błędnego transportu w protokole SCTP. |
W tym tygodniu | 9,8 | 0,51 % | ||
| Przepełnienie bufora w jądrze Linuxa może prowadzić do awarii systemu. | Przepełnienie bufora w jądrze Linuxa może prowadzić do awarii systemu. |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in… | In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_locker() decode_locker() in cls_lock_client.c contains three unsafe decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads: 1.… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A… | In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from primary_temp A corrupted osdmap received from a Ceph monitor or OSD may contain osd indices in its pg_temp, primary_temp, pg_upmap, and pg_upmap_items parts that don't exist, i.e.,… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply… | In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current->journal_info handle_reply() stores a `ceph_mds_request` pointer in `current->journal_info` while filling the inode and dentry cache from an MDS reply. An allocation in this section… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP… | In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip_vs_in_icmp() rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmp_send(). However, IPCB(skb)->opt still describes the… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create()… | In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered… | In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will… |
W tym tygodniu | 9,8 | 0,51 % | ||
| In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in… | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is… |
W tym tygodniu | 9,8 | 0,51 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.