Umbraco 安全漏洞

Umbraco is an open source content management system CMS written in C by the Danish company Umbraco. A security vulnerability exists in Umbraco versions prior to 14.1.2, which stems from the fact that certain endpoints in the management API can return stack trace information even if Umbraco is not...

PT-2024-30538 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions prior to 14.1.2 Description: The issue concerns Umbraco, an ASP.NET CMS, where some endpoints in the Management API can return stack trace information even when Umbraco is not in debug mode. This can occur, for example, when...

PT-2024-5952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the concurrent execution of tcp sk exit batch in the Linux kernel. This can lead to the destruction of timewait sockets belonging to the exiting netns, causing an...

SUSE CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

DEBIAN-CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

AZL-68357 CVE-2024-42321 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

UBUNTU-CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

PT-2024-40843

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: vte write debug, do trans, an...

PT-2024-31365

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc3Lyude-Test+ 30 Description The Linux kernel has a vulnerability related to the use of a non-coherent DMA allocator in the nouveau firmware. When the SG DEBUG feature is enabled in the kernel and the IOMM...

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

GNCC GC2 安全漏洞

The GNCC GC2 is an indoor security camera from GNCC. A security vulnerability exists in GNCC GC2. An attacker exploited the vulnerability to obtain a privileged command shell via the UART debug port...

PT-2024-22011 · Friendica · Friendica

Name of the Vulnerable Software and Affected Versions: Friendica version 2023.12 Description: The issue allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature. This is a Cross Site Scripting issue. Recommendations: For Friendica version 2023.12,...

CVE-2024-27728

The Friendica v.2023.12 software contains a Cross Site Scripting (XSS) vulnerability (CWE-79) within the babel debug feature . A remote attacker can exploit this by interacting with the text parameter to obtain sensitive information from a user's session. As a mitigation, users are advised to dis...

GNCC GC2 安全漏洞

The GNCC GC2 is an indoor security camera from GNCC. A security vulnerability exists in the GNCC GC2 that stems from the ability to read WiFi passwords via the UART debug port...

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

CVE-2024-27728: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babel debug feature...

USN-6951-2 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - M68K architecture; - User-Mode Linux UML; - x86 architecture; - Accessibility subsystem; -...