Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability

A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient...

SUSE CVE-2024-50097

In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupported Some platforms such as i.MX25 and i.MX27 do not support PTP, so on these platforms fecptpinit is not called and the related members in fep are not initialized. However,...

SUSE CVE-2024-50113

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

Cisco Nexus Dashboard Fabric Controller SQL注入漏洞

The Cisco Nexus Dashboard Fabric Controller is a cloud and data center network management software controller that simplifies the operation and management of data center networks. The Cisco Nexus Dashboard Fabric Controller suffers from a SQL injection vulnerability that can be exploited by remot...

PT-2024-7743 · Cisco · Cisco Nexus Dashboard Fabric Controller

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller NDFC affected versions not specified Description: A vulnerability in the REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated...

The vulnerability of the kirin_pcie_parse_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kirinpcieparseport function in the Linux kernel’s drivers/pci/controller/dwc/pcie-kirin.c file is related to incorrect calculation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2024-50122

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...

DEBIAN-CVE-2024-50113

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

CVE-2024-50113

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

UBUNTU-CVE-2024-50113

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

UBUNTU-CVE-2024-50097

In the Linux kernel, the following vulnerability has been resolved: net: fec: don't save PTP state if PTP is unsupported Some platforms such as i.MX25 and i.MX27 do not support PTP, so on these platforms fecptpinit is not called and the related members in fep are not initialized. However,...

CVE-2024-50113 firewire: core: fix invalid port index for parent device

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

CVE-2024-50113 firewire: core: fix invalid port index for parent device

In the Linux kernel, the following vulnerability has been resolved: firewire: core: fix invalid port index for parent device In a commit 24b7f8e5cd65 "firewire: core: use helper functions for self ID sequence", the enumeration over self ID sequence was refactored with some helper functions with...

PT-2025-11654

Name of the Vulnerable Software and Affected Versions Synology BeeStation Manager BSM versions 1.1-65374 and earlier Synology DiskStation Manager DSM versions prior to 6.2.4-25556-8 Synology DiskStation Manager DSM versions prior to 7.1.1-42962-7 Synology DiskStation Manager DSM versions prior to...

PT-2025-11652

Name of the Vulnerable Software and Affected Versions Synology BeeStation Manager BSM versions prior to 1.1-65374 Synology DiskStation Manager DSM versions prior to 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6, and 7.2.2-72806-1 Synology Unified Controller DSMUC versions prior to...

GHSA-29WX-VH33-7X7R vulnerabilities

Vulnerabilities for packages: actions-runner-controller, crossplane, kaniko, zarf, opentelemetry-collector-contrib, kots, wal-g, zot, flux-notification-controller, minio-operator, crossplane-provider-azure-sql, weaviate, cosign, gitea, openbao, crossplane-provider-azure, guac, scorecard, minio,...

CVE-2024-51744 vulnerabilities

Vulnerabilities for packages: actions-runner-controller, crossplane, kaniko, zarf, opentelemetry-collector-contrib, kots, wal-g, zot, flux-notification-controller, minio-operator, crossplane-provider-azure-sql, weaviate, cosign, gitea, openbao, crossplane-provider-azure, guac, scorecard, minio,...

CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions...

CVE-2024-38408 Cryptographic Issues in BT Controller

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions...

CVE-2024-38408

CVE-2024-38408 describes a cryptographic issue in Qualcomm Bluetooth controller code triggered when an LMP Start Encryption command is received under unexpected conditions. Affected are Qualcomm chipset families with closed-source components; the vulnerability is rated Critical by NVD (CVE-2024-3...