mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Wed Jul 15 12:24:19 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
a90de4f84b
commit
8600ac0c09
651 files changed
+8500
-89
No files matched your search
@@ -10,6 +10,7 @@ Utempter allows device names that contain .. (dot dot) directory traversal seque
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2004-174.html
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2005-2096](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2096)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 cal
|
||||
|
||||
#### Reference
|
||||
- http://www.mozilla.org/security/announce/2006/mfsa2006-37.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9849
|
||||
|
||||
@@ -10,6 +10,7 @@ The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9703
|
||||
|
||||
@@ -10,6 +10,7 @@ Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9762
|
||||
|
||||
@@ -10,6 +10,7 @@ Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which
|
||||
|
||||
#### Reference
|
||||
- http://www.mozilla.org/security/announce/2006/mfsa2006-41.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote us
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9768
|
||||
|
||||
@@ -10,6 +10,7 @@ Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allow
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9966
|
||||
|
||||
@@ -10,6 +10,7 @@ EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote at
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491
|
||||
|
||||
@@ -10,6 +10,7 @@ Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey be
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote atta
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9611
|
||||
|
||||
@@ -11,6 +11,7 @@ Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 befor
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy Au
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5,
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.ubuntu.com/usn/usn-361-1
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
@@ -11,6 +11,7 @@ Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before
|
||||
|
||||
#### Reference
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0608.html
|
||||
- http://www.redhat.com/support/errata/RHSA-2006-0610.html
|
||||
- http://www.securityfocus.com/archive/1/446658/100/200/threaded
|
||||
- http://www.vupen.com/english/advisories/2008/0083
|
||||
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2009-0264](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0264)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2009-0270](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0270)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2009-0271](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0271)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2016-6171](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6171)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gitlab.labs.nic.cz/labs/knot/issues/464
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2016-9840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2016-9841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2016-9842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2017-14919](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14919)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,7 @@
|
||||
### [CVE-2018-25032](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-25032)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vul
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://redaxo.org/download/redaxo/5.5.1.zip
|
||||
- https://www.exploit-db.com/exploits/44891
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2021-41617](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41617)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -11,6 +12,7 @@ sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurati
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpujul2022.html
|
||||
|
||||
@@ -10,6 +10,7 @@ Arunna 1.0.0 contains a cross-site request forgery vulnerability that allows att
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://web.archive.org/web/20211216074128/https://lyhinslab.org/index.php/2021/11/29/how-white-box-hacking-works-xss-csrf-in-arunna/
|
||||
- https://www.exploit-db.com/exploits/50608
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2022-23303](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23303)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2022-23304](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23304)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
### [CVE-2022-37434](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2022-37660](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37660)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2022-48174](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48174)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2023-28531](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28531)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -11,6 +12,7 @@ ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the inten
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2023-45853](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2023-51384](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51384)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -11,6 +12,7 @@ In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incom
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -13,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:netfilter: al
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
- https://seadragnol.github.io/posts/CVE-2023-52927/
|
||||
|
||||
|
||||
@@ -14,6 +14,7 @@ Separate Groups mode restrictions were not honoured in the forum summary report,
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.redhat.com/show_bug.cgi?id=2243453
|
||||
- https://moodle.org/mod/forum/discuss.php?d=451592
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -12,7 +12,7 @@ Eine Schwachstelle wurde in PHPGurukul Maid Hiring Management System 1.0 ausgema
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://vuldb.com/?submit.470508
|
||||
|
||||
#### Github
|
||||
- https://github.com/cnetsec/south-america-cve-hall
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2024-21529](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21529)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -10,6 +11,7 @@ Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-7981555
|
||||
- https://security.snyk.io/vuln/SNYK-JS-DSET-7116691
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2024-21626](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21626)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:mm/vmscan: fi
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:wifi: iwlwifi
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -1,6 +1,7 @@
|
||||
### [CVE-2024-28956](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956)
|
||||
%20Processors&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -11,7 +12,7 @@ Exposure of Sensitive Information in Shared Microarchitectural Structures during
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -5,7 +5,7 @@
|
||||
|
||||
### Description
|
||||
|
||||
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.This issue affects Apache Submarine Server Core: from 0.8.0.As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core.This issue affects Apache Submarine Server Core: from 0.8.0.An attacker can bypass authentication by sending specially crafted REST requests.As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -14,6 +14,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -26,7 +27,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv6: Fix pot
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -16,6 +16,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -28,7 +29,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv4: Fix uni
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:gfs2: Fix NUL
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:fscache: dele
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/bygregonline/devsec-fastapi-report
|
||||
|
||||
@@ -3,6 +3,8 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +14,8 @@ In the Linux kernel, the following vulnerability has been resolved:erofs: handle
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2024-47809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47809)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In the Linux kernel, the following vulnerability has been resolved:dlm: fix possible lkb_resource null dereferenceThis patch fixes a possible null pointer dereference when this function iscalled from request_lock() as lkb->lkb_resource is not assigned yet,only after validate_lock_args() by calling attach_lkb(). Another issueis that a resource name could be a non printable bytearray and we cannotassume to be ASCII coded.The log functionality is probably never being hit when DLM is used innormal way and no debug logging is enabled. The null pointer dereferencecan only occur on a new created lkb that does not have the resourceassigned yet, it probably never hits the null pointer dereference but weshould be sure that other changes might not change this behaviour and weactually can hit the mentioned null pointer dereference.In this patch we just drop the printout of the resource name, the lkb idis enough to make a possible connection to a resource name if thisexists.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2024-49968](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49968)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In the Linux kernel, the following vulnerability has been resolved:ext4: filesystems without casefold feature cannot be mounted with siphashWhen mounting the ext4 filesystem, if the default hash version is set toDX_HASH_SIPHASH but the casefold feature is not set, exit the mounting.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:block: fix in
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -0,0 +1,26 @@
|
||||
### [CVE-2024-49998](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49998)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In the Linux kernel, the following vulnerability has been resolved:net: dsa: improve shutdown sequenceAlexander Sverdlin presents 2 problems during shutdown with thelan9303 driver. One is specific to lan9303 and the other just happensto reproduce there.The first problem is that lan9303 is unique among DSA drivers in that itcalls dev_get_drvdata() at "arbitrary runtime" (not probe, not shutdown,not remove):phy_state_machine()-> ... -> dsa_user_phy_read() -> ds->ops->phy_read() -> lan9303_phy_read() -> chip->ops->phy_read() -> lan9303_mdio_phy_read() -> dev_get_drvdata()But we never stop the phy_state_machine(), so it may continue to runafter dsa_switch_shutdown(). Our common pattern in all DSA drivers isto set drvdata to NULL to suppress the remove() method that may comeafterwards. But in this case it will result in an NPD.The second problem is that the way in which we setdp->conduit->dsa_ptr = NULL; is concurrent with receive packetprocessing. dsa_switch_rcv() checks once whether dev->dsa_ptr is NULL,but afterwards, rather than continuing to use that non-NULL value,dev->dsa_ptr is dereferenced again and again without NULL checks:dsa_conduit_find_user() and many other places. In between dereferences,there is no locking to ensure that what was valid once continues to bevalid.Both problems have the common aspect that closing the conduit interfacesolves them.In the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWNevent in dsa_user_netdevice_event() which closes user ports as well.dsa_port_disable_rt() calls phylink_stop(), which synchronously stopsthe phylink state machine, and ds->ops->phy_read() will thus no longercall into the driver after this point.In the second case, dev_close(conduit) should do this, as perDocumentation/networking/driver.rst:| Quiescence| ----------|| After the ndo_stop routine has been called, the hardware must| not receive or transmit any data. All in flight packets must| be aborted. If necessary, poll or wait for completion of| any reset commands.So it should be sufficient to ensure that later, when we zeroizeconduit->dsa_ptr, there will be no concurrent dsa_switch_rcv() callon this conduit.The addition of the netif_device_detach() function is to ensure thatioctls, rtnetlinks and ethtool requests on the user ports no longerpropagate down to the driver - we're no longer prepared to handle them.The race condition actually did not exist when commit 0650bf52b31f("net: dsa: be compatible with masters which unregister on shutdown")first introduced dsa_switch_shutdown(). It was created later, when westopped unregistering the user interfaces from a bad spot, and we justreplaced that sequence with a racy zeroization of conduit->dsa_ptr(one which doesn't ensure that the interfaces aren't up).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:ext4: fix acc
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:bpf: Prevent
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/bygregonline/devsec-fastapi-report
|
||||
|
||||
@@ -10,6 +10,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -21,7 +22,7 @@ In the Linux kernel, the following vulnerability has been resolved:bpf: Fix over
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/bygregonline/devsec-fastapi-report
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2024-50298](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50298)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In the Linux kernel, the following vulnerability has been resolved:net: enetc: allocate vf_state during PF probesIn the previous implementation, vf_state is allocated memory only when VFis enabled. However, net_device_ops::ndo_set_vf_mac() may be called beforeVF is enabled to configure the MAC address of VF. If this is the case,enetc_pf_set_vf_mac() will access vf_state, resulting in access to a nullpointer. The simplified error log is as follows.root@ls1028ardb:~# ip link set eno0 vf 1 mac 00:0c:e7:66:77:89[ 173.543315] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004[ 173.637254] pc : enetc_pf_set_vf_mac+0x3c/0x80 Message from sy[ 173.641973] lr : do_setlink+0x4a8/0xec8[ 173.732292] Call trace:[ 173.734740] enetc_pf_set_vf_mac+0x3c/0x80[ 173.738847] __rtnl_newlink+0x530/0x89c[ 173.742692] rtnl_newlink+0x50/0x7c[ 173.746189] rtnetlink_rcv_msg+0x128/0x390[ 173.750298] netlink_rcv_skb+0x60/0x130[ 173.754145] rtnetlink_rcv+0x18/0x24[ 173.757731] netlink_unicast+0x318/0x380[ 173.761665] netlink_sendmsg+0x17c/0x3c8
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -14,6 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:net: fix data
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:block: fix ua
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/bygregonline/devsec-fastapi-report
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:scsi: ufs: bs
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -15,6 +16,7 @@ In the Linux kernel, the following vulnerability has been resolved:scsi: sg: Fix
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv6: Fix sof
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/cku-heise/euvd-api-doc
|
||||
|
||||
@@ -9,6 +9,8 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -20,7 +22,8 @@ In the Linux kernel, the following vulnerability has been resolved:net: stmmac:
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/cku-heise/euvd-api-doc
|
||||
|
||||
@@ -2,6 +2,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:topology: Kee
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/oogasawa/Utility-security
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -14,6 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:fs: relax ass
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:rdma/cxgb4: P
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -14,6 +15,7 @@ In the Linux kernel, the following vulnerability has been resolved:memcg: fix so
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
|
||||
@@ -8,6 +8,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -19,6 +20,7 @@ In the Linux kernel, the following vulnerability has been resolved:pps: Fix a us
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:platform/x86:
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -13,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:safesetid: ch
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -16,6 +16,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -29,6 +30,7 @@ In the Linux kernel, the following vulnerability has been resolved:HID: multitou
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:remoteproc: c
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -13,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:ubifs: skip d
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:wifi: mac8021
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:drm/v3d: Stop
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2025-10585](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10585)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
### [CVE-2025-12758](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12758)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2025-15467](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,6 +7,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -16,7 +17,7 @@ In the Linux kernel, the following vulnerability has been resolved:platform/x86/
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -13,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:netfilter: co
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:io_uring/even
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/oogasawa/Utility-security
|
||||
|
||||
@@ -3,6 +3,8 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +14,8 @@ In the Linux kernel, the following vulnerability has been resolved:net: fec: han
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -3,6 +3,8 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +14,8 @@ In the Linux kernel, the following vulnerability has been resolved:eth: bnxt: al
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -4,6 +4,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -13,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:pfifo_tail_en
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +17,7 @@ In the Linux kernel, the following vulnerability has been resolved:mptcp: handle
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:mptcp: pm: on
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/w4zu/Debian_security
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:mptcp: consol
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
@@ -12,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:net: rose: fi
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
Loaded 100 of 651 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user