Vuldb Updates

A vulnerability has been found in Linux Kernel up to 5.10.210/5.15.149/6.1.79/6.6.18/6.7.6 and classified as critical. Affected by this vulnerability is the function devm_kasprintf of the component dmaengine. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-26771. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.7.6 and classified as critical. Affected by this issue is the function ext4_mb_find_by_goal. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2024-26772. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in DotClear 1.2.5. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument tool_url leads to basic cross site scripting. This vulnerability is traded as CVE-2007-1989. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Doruk100.net. It has been rated as critical. Affected by this issue is some unknown functionality of the file info.php. The manipulation leads to file inclusion. This vulnerability is handled as CVE-2007-2288. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Dokeos Open Source Learning And Knowledge Management Tool up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file forum/viewthread.php. The manipulation of the argument forum leads to cross site scripting. This vulnerability was named CVE-2007-6574. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Linux Kernel up to 6.6.18/6.7.6. It has been rated as problematic. Affected by this issue is the function devm_kasprintf of the component nvidia-shield. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-26770. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.149/6.1.79/6.6.18/6.7.6. Affected is the function nvmet_wq of the component nvmet-fc. The manipulation leads to deadlock. This vulnerability is traded as CVE-2024-26769. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.18/6.7.6. Affected by this vulnerability is an unknown functionality of the component LoongArch. The manipulation leads to stack-based buffer overflow. This vulnerability is known as CVE-2024-26768. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.18/6.7.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component display. The manipulation leads to infinite loop. This vulnerability is known as CVE-2024-26767. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.7.6 and classified as problematic. This issue affects some unknown processing in the library sdma.h of the component hfi1. The manipulation leads to off-by-one. The identification of this vulnerability is CVE-2024-26766. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. It has been classified as critical. Affected is the function init_fn of the file kernel/rcu/tree.c: of the component LoongArch. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2024-26765. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.7.6 and classified as problematic. This vulnerability affects the function kiocb_set_cancel_fn of the component aio. The manipulation leads to privilege escalation. This vulnerability was named CVE-2024-26764. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.7.6. Affected by this issue is some unknown functionality of the component dm-crypt. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2024-26763. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.7.6. Affected by this vulnerability is the function cxl_mem. The manipulation leads to denial of service. This vulnerability is known as CVE-2024-26762. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. Affected is an unknown function of the component cxl. The manipulation leads to denial of service. This vulnerability is traded as CVE-2024-26761. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.79/6.6.18/6.7.6. This affects the function bio_put of the component pscsi. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-26760. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PHP Scripts Mall Schools Alert Management Script. It has been declared as critical. This vulnerability affects unknown code of the file delete_img.php. The manipulation of the argument img leads to path traversal. This vulnerability was named CVE-2018-12053. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHP Scripts Mall Schools Alert Management Script. It has been rated as critical. This issue affects some unknown processing of the file img.php. The manipulation of the argument f as part of Parameter leads to path traversal. The identification of this vulnerability is CVE-2018-12054. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in PHP Scripts Mall Schools Alert Management Script. Affected is an unknown function of the file contact_us.php. The manipulation as part of Contact leads to sql injection. This vulnerability is traded as CVE-2018-12055. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHP Scripts Mall School Management Script 3.0.4. It has been classified as critical. Affected is an unknown function of the file parents/Parent_module/parent_login.php. The manipulation of the argument Username/Password leads to sql injection. This vulnerability is traded as CVE-2018-7477. It is possible to launch the attack remotely. Furthermore, there is an exploit available.