Aggregator

CVE-2019-2181 | Google Android Kernel binder.c binder_transaction integer overflow (ID 154951 / Nessus ID 247432)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as critical was found in Google Android. Affected by this vulnerability is the function binder_transaction of the file binder.c of the component Kernel. The manipulation leads to integer overflow. This vulnerability is known as CVE-2019-2181. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2023-52598 | Linux Kernel up to 6.7.3 ptrace save_fpu_regs memory corruption (Nessus ID 247433)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 6.7.3. It has been classified as critical. This affects the function save_fpu_regs of the component ptrace. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2023-52598. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-14861 | Oracle MySQL Server up to 8.0.21 Optimizer denial of service (Nessus ID 247439)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Oracle MySQL Server up to 8.0.21. It has been rated as critical. Affected by this issue is some unknown functionality of the component Optimizer. The manipulation leads to denial of service. This vulnerability is handled as CVE-2020-14861. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-44997 | Linux Kernel up to 6.6.47/6.10.6 mtk_wed_setup_tc_block_cb use after free (326a89321f9d/b453a4bbda03/db1b4bedb9b9 / Nessus ID 247440)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.47/6.10.6. Affected is the function mtk_wed_setup_tc_block_cb. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-44997. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-0742 | Linux Kernel up to 5.15.27/5.16.13/5.17-rc7 ICMPv6 Packet igmp6_event_query/igmp6_event_report resource consumption (Nessus ID 247441)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 5.15.27/5.16.13/5.17-rc7. It has been rated as problematic. This issue affects the function igmp6_event_query/igmp6_event_report of the component ICMPv6 Packet Handler. The manipulation leads to resource consumption. The identification of this vulnerability is CVE-2022-0742. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2021-47567 | Linux Kernel up to 5.10.82/5.15.5 emergency_ctx stack-based overflow (dfe906da9a1a/c4e3ff8b8b1d/5bb60ea611db / Nessus ID 247444)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 5.10.82/5.15.5. It has been rated as critical. This issue affects the function emergency_ctx. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2021-47567. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-35920 | Linux Kernel up to 6.6.26/6.8.5 mediatek ctx_list null pointer dereference (0a2dc707aa42/23aaf8241210/6467cda18c9f / Nessus ID 247448)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.26/6.8.5. Affected by this issue is the function ctx_list of the component mediatek. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-35920. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

INC

Dark Feed IO
4 months 2 weeks ago

You must login to view this content

cohenido

CVE-2016-9120 | Linux Kernel up to 4.5 ion.c ion_ioctl use after free (Nessus ID 247451 / BID-94669)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 4.5. This affects the function ion_ioctl of the file drivers/staging/android/ion/ion.c. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2016-9120. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-33619 | Linux Kernel up to 6.1.92/6.6.32/6.9.3 libstub priv.runtime_map uninitialized pointer (Nessus ID 247452)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.92/6.6.32/6.9.3. Affected is an unknown function of the component libstub. The manipulation of the argument priv.runtime_map leads to uninitialized pointer. This vulnerability is traded as CVE-2024-33619. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-0745 | Mozilla Firefox up to 121 WebAudio stack-based overflow (Nessus ID 247453)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Mozilla Firefox up to 121. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebAudio. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-0745. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-47509 | Linux Kernel up to 5.15.7 ALSA allocation of resources (Nessus ID 247459)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 5.15.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the component ALSA. The manipulation leads to allocation of resources. This vulnerability is handled as CVE-2021-47509. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

The Hackers News
4 months 2 weeks ago
A novel attack technique could be weaponized to rope thousands of public domain controllers (DCs) around the world to create a malicious botnet and use it to conduct powerful distributed denial-of-service (DDoS) attacks. The approach has been codenamed Win-DDoS by SafeBreach researchers Or Yair and Shahak Morag, who presented their findings at the DEF CON 33 security conference today. "As we
The Hacker News

Google Hacked – Approx 2.5 Million Records of Google Ads Customer Data Leaked

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 2 weeks ago

Google has disclosed a significant data breach involving one of its corporate Salesforce instances, compromising customer data tied to its Google Ads platform. Google has not revealed the exact number of people impacted, but according to ShinyHunters, who spoke with Cyber Security News, the breach exposed around 2.5 million records (Approx). Whether some of these […]

The post Google Hacked – Approx 2.5 Million Records of Google Ads Customer Data Leaked appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Balaji

CVE-2019-19055 | Linux Kernel net/wireless/nl80211.c nl80211_get_ftm_responder_stats resource consumption (Nessus ID 247462)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function nl80211_get_ftm_responder_stats of the file net/wireless/nl80211.c. The manipulation leads to resource consumption. This vulnerability is traded as CVE-2019-19055. It is possible to launch the attack remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment.
vuldb.com

CVE-2024-26895 | Linux Kernel up to 6.8.1 wilc1000 wilc_netdev_cleanup use after free (Nessus ID 247461)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Linux Kernel up to 6.8.1. It has been declared as critical. Affected by this vulnerability is the function wilc_netdev_cleanup of the component wilc1000. The manipulation leads to use after free. This vulnerability is known as CVE-2024-26895. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad