10184 matches found
Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-22650 Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider
A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider AP. This characteristic also applies to disabled or revoked users, Rancher will not reflect these modifications which may leave the user’s...
fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
...
SUSE CVE-2024-47674
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
This is a vulnerability in the Linux kernel's Data Movement Accelerator DMA engine, specifically affecting the Intel Data Streaming Accelerator IDXD driver. The issue arises during the removal rmmod of the idxd driver on systems with only one active CPU. In such scenarios, the driver's cleanup...
Rancher 安全漏洞
Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. A security vulnerability exists in Rancher versions prior to 2.7.14 and prior to 2.8.5, which stems from a failure to automatical...
AZL-50597 CVE-2024-47674 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
CVE-2024-47674
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
DEBIAN-CVE-2024-47674
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
UBUNTU-CVE-2024-47674
In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case As Jann points out, PFN mappings are special, because unlike normal memory mappings, there is no lifetime information associated with the mapping - it is just a raw...
kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...
WordPress plugin Smart Online Order for Clover 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
markdown-to-jsx 安全漏洞
markdown-to-jsx is one of the lightest, customizable React markdown components by Evan Jacobs Personal Developer. A security vulnerability exists in markdown-to-jsx prior to version 7.4.0 that stems from improper input cleanup...
ROS-20241015-09
A vulnerability in the Golang programming language is related to the lack of value cleanup. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...
PT-2024-34104
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A crash can occur in the Linux kernel when blk alloc disk fails, causing the md-disk variable to be set to an error value. The cleanup mapped device function attempts to access md-disk...
Malicious code in shmam-mw-test-3-test-package-3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
...
btrfs: clean up our handling of refs == 0 in snapshot delete
...
Malicious code in module-grab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb37f88f9f6a37fa239ee1d591acdd1ee642b1d6447cba12accde00c474a94bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...