CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-21924

The CVE-2024-21924 entry concerns an SMM callout vulnerability in AMD’s AmdPlatformRasSspSmm driver that could allow a ring-0 attacker to modify boot-services handlers and potentially achieve arbitrary code execution. Documents detail that the vulnerability affects AMD SMM components in multiple ...

PT-2025-6389

Name of the Vulnerable Software and Affected Versions AmdPlatformRasSspSmm driver affected versions not specified Description The issue is related to an SMM callout vulnerability within the AmdPlatformRasSspSmm driver, which could allow a ring 0 attacker to modify boot services handlers,...

PT-2025-6244

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.109.0 through 2025.2.0-alpha.0 Description: Misskey is an open source, federated social media platform. Due to a lack of CSRF protection and the lack of proper security attributes in the authentication cookies of Bull's...

CVE-2024-21924: Execution with Unnecessary Privileges

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

Azure Linux 3.0 Security Update: emacs (CVE-2024-39331)

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39331 advisory. - In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %... link abbrev even when it specifies ...

CVE-2025-1115: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function...

CVE-2025-24355

Updatecli is a tool used to apply file update strategies. Prior to version 0.93.0, private maven repository credentials may be leaked in application logs in case of unsuccessful retrieval operation. During the execution of an updatecli pipeline which contains a maven source configured with basic...

CVE-2022-39243

NuProcess is an external process execution implementation for Java. In all the versions of NuProcess where it forks processes by using the JVM's JavajavalangUNIXProcessforkAndExec method 1.2.0+, attackers can use NUL characters in their strings to perform command line injection. Java's...

Malicious code in tan1-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-993 Malicious code in tan1-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-57719

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...

PT-2025-3547

Name of the Vulnerable Software and Affected Versions lunasvg version 3.0.0 Description The issue is related to a segmentation violation in the blend transformed tiled argb.isra.0 component. This component is part of the lunasvg software and is vulnerable to exploitation due to an issue that caus...

CVE-2024-57719: NULL Pointer Dereference

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...

PT-2025-43559

Name of the Vulnerable Software and Affected Versions PDNS Recursor versions prior to 5.2.6-0+deb13u1 Description Insufficient validation of delegation information could lead to cache pollution in PDNS Recursor, a resolving name server. The changes required to address this are too extensive to...

AZL-55271 CVE-2024-56724 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain for TMU device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has inherited flaws. This was unveiled when...

Uptime Kuma 路径遍历漏洞

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from the individual developer Louis Lam. A path traversal vulnerability exists in Uptime Kuma versions 1.23.0 through 1.23.15 and 2.0.0-beta.0, which stems from a lack of server-side validation and cleanup stemming from a URL field in the...

CVE-2024-12626: Improper Neutralization of Input During Web Page Generation

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘a-0-o-searchfieldvalue’ parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitizatio...