UBUNTU-CVE-2024-57792

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...

CVE-2024-57792 power: supply: gpio-charger: Fix set charge current limits

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...

CVE-2024-57792

CVE-2024-57792 is a Linux kernel vulnerability in the power: supply: gpio-charger path. The issue arises when the lowest charge current limit is forced to be > 0 and a requested limit falls below this, causing an index calculation that can access memory beyond the allocated memory. It has been...

CVE-2024-57792

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...

CVE-2024-57792 power: supply: gpio-charger: Fix set charge current limits

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for devices which allow to set the lowest charge current limit to be greater zero. If requested charge current limit is below lowest limit,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the gpio-charger driver potentially accessing areas of allocated memory that are exceeded when setting the...

CVE-2025-22139

creationtimestamp| type| source ---|---|--- 2025-01-08 18:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113794159917395964 2025-01-08 19:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfausq4ppg2m 2025-01-08 19:48:16+00:00| seen|...

Security update for gtk3

This update for gtk3 fixes the following issues: CVE-2024-6655: Fixed library injection from current working directory bsc1228120. Other fixes: - Updated to version 3.24.43 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

CVE-2024-56409

creationtimestamp| type| source ---|---|--- 2025-01-03 16:52:48+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-j2xg-cjcx-4677 2025-01-03 17:09:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113765525095900326 2025-01-03...

PT-2026-5994

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the btrfs subsystem related to transaction handling. Specifically, the wait current trans function does not properly consider transaction types when...

PT-2025-47801

Name of the Vulnerable Software and Affected Versions GnuTLS versions 15.0 and -current GnuTLS versions prior to Fedora 43 Description A stack overflow issue exists in GnuTLS. The issue is related to a flaw that could potentially allow for malicious exploitation. Recommendations Update GnuTLS to...

PT-2026-2876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the initialization of the cpu tasks array. The issue occurs because the array is not initialized statically, leading to potential crashes whe...

Delta Electronics DRASimuCAD 安全漏洞

Delta Electronics DRASimuCAD is an integrated platform for robot simulation. A type confusion vulnerability exists in Delta Electronics DRASimuCAD, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

DEBIAN-CVE-2024-56563

In the Linux kernel, the following vulnerability has been resolved: ceph: fix cred leak in cephmdscheckaccess getcurrentcred increments the reference counter, but the putcred call was missing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the cred pointer not being passed correctly in the ceph module, resulting in redundant getcurrentcred calls and...

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from buffer overflows in the queue, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created file...

CVE-2022-44514

Acrobat Reader DC version 22.001.20085 and earlier, 20.005.3031x and earlier and 17.012.30205 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena Simulation is the American Rockwell Rockwell Automation company's set of simulation software to provide 3D animation and graphics capabilities. A memory misreference code execution vulnerability exists in the Rockwell Automation Arena Simulation DOE file that can be...

CISCO-SA-20190501-PNR

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:52+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794671188407...

PT-2024-36610 · Unknown · Graphics::Colornames

Name of the Vulnerable Software and Affected Versions: Graphics::ColorNames versions prior to 3.2.0 Description: The issue is related to an ambiguity between modules and filenames in the Graphics::ColorNames package for Perl, which can lead to HTML injection by an attacker who can create a file i...