1052 matches found
CVE-2024-47882
OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an...
BELL-CVE-2024-50013
Bulletin has no description...
BELL-CVE-2024-47753
Bulletin has no description...
BELL-CVE-2024-47691
Bulletin has no description...
BELL-CVE-2024-50046
Bulletin has no description...
BELL-CVE-2024-49968
Bulletin has no description...
BELL-CVE-2024-47713
Bulletin has no description...
CVE-2022-48992
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle kernel NULL pointer dereference error. The issue occurred in fuzzing test...
CVE-2024-49913
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream This commit addresses a null pointer dereference issue in the commitplanesforstream function at line 4140. The issue could occur when toppipetoprogram ...
CVE-2024-49915
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for clkmgr in dcn32inithw This commit addresses a potential null pointer dereference issue in the dcn32inithw function. The issue could occur when dc-clkmgr is null. The fix adds a check to ensure...
CVE-2024-49986
In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix use after free on platformdeviceregister errors x86androidtabletremove frees the pdevs array, so it should not be used after calling x86androidtabletremove. When platformdeviceregister fails...
CVE-2024-49882
In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path In ext4exttrytomergeup, set path1.pbh to NULL after it has been released, otherwise it may be released twice. An example of what triggers this is as follows: split2 map split...
CVE-2024-49862
In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix off by one in getrpi The rp-priv-rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the needs to be = to prevent an off by one access...
CVE-2024-21241
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
BELL-CVE-2024-47668
Bulletin has no description...
CVE-2024-9767
creationtimestamp| type| source ---|---|--- 2024-10-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1371/...
CVE-2024-25885
An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...
CVE-2024-43552
creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review...
BELL-CVE-2024-46956
Bulletin has no description...
GCVE-1-2025-0002
creationtimestamp| type| source ---|---|--- 2024-10-06 08:21:05+00:00| confirmed| Reporter 2025-07-01 09:05:03+00:00| seen| https://www.hackthebox.com/blog/cve-2023-34362-explained 2025-07-01 09:52:06+00:00| seen| https://social.circl.lu/@[email protected]/114777352334943118 2025-07-0...