A vulnerability, which was classified as critical, has been found in Rebuild up to 3.2.3. Affected by this issue is some unknown functionality of the file /project/tasks/list. The manipulation leads t ...
Continue Reading
March 23, 2023
A use-after-free flaw was found in the Linux kernelâs Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to cr ...
Continue Reading
March 23, 2023
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causi ...
Continue Reading
March 23, 2023
A use-after-free flaw was found in the Linux kernelâs core dump subsystem. This flaw allows a local user to crash the system. Only if patch 390031c94211 ("coredump: Use the vma snapshot in fill_f ...
Continue Reading
March 23, 2023
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression tha ...
Continue Reading
March 23, 2023
Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only available to teachers and managers).Read More ...
Continue Reading
March 23, 2023
The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core Moodle LMS).Read More ...
Continue Reading
March 23, 2023
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk.Read More ...
Continue Reading
March 23, 2023
Back to Main
