CVE-2024-43876 PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an xhci component that could lead to a null pointer dereference in the event of a sudden host death...

PT-2024-30264 · Jpress · Jpress

Name of the Vulnerable Software and Affected Versions: JPress versions through 5.1.1 Description: The issue is an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a usb component that can cause the kernel to crash when the controller is unresponsive...

GO-2023-1925 Weave GitOps Terraform Controller Information Disclosure Vulnerability in github.com/weaveworks/tf-controller

Weave GitOps Terraform Controller Information Disclosure Vulnerability in github.com/weaveworks/tf-controller...

GO-2023-1512 Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd

Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd...

CVE-2024-25009

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

CVE-2024-25009 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

Ericsson Packet Core Controller PCC contains a vulnerability in Access and Mobility Management Function AMF where improper input validation can lead to denial of service which may result in service degradation...

Divide By Zero

libzephyr.so is vulnerable to Divide By Zero. The vulnerability is caused due to a function llcppdudecodeconnupdateind within subsys/bluetooth/controller/llsw/ullllcppdu.c not validating the content before using it. This can lead to a malicious BLE device crash BLE peripheral's BLE controller by...

BIT-HUBBLE-RELAY-2024-42486 Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In versions on the 1.15.x branch prior to 1.15.8 and the 1.16.x branch prior to 1.16.1, ReferenceGrant changes are not correctly propagated in Cilium's GatewayAPI controller, which could lead to Gateway...

BIT-CILIUM-OPERATOR-2024-42486 Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In versions on the 1.15.x branch prior to 1.15.8 and the 1.16.x branch prior to 1.16.1, ReferenceGrant changes are not correctly propagated in Cilium's GatewayAPI controller, which could lead to Gateway...

CVE-2024-7944

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. T...

Ericsson Packet Core Controller 安全漏洞

Ericsson Packet Core Controller Ericsson PCC is a packet core controller from Ericsson, Sweden. A security vulnerability exists in Ericsson Packet Core Controller versions prior to 1.33 that stems from improper input validation in the Access and Mobility Management Function component, which could...

PT-2024-20698 · Ericsson · Ericsson Packet Core Controller

Name of the Vulnerable Software and Affected Versions: Ericsson Packet Core Controller PCC affected versions not specified Description: The issue is related to improper input validation in the Access and Mobility Management Function AMF of the Ericsson Packet Core Controller PCC, which can lead t...

Vulnerability fixed in Kubernetes

A vulnerability has been fixed in Kubernetes. The vulnerability is in the ingress-nginx module and allows a malicious person with permissions to create ingress objects to bypass a security measure to execute arbitrary code with permissions from the ingress-nginx controller. In a standard...

The vulnerability of the Ingress controller in the Kubernetes cluster ingress-nginx, related to errors in processing Ingress object annotations, allows a hacker to increase their privileges.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to errors in processing Ingress object annotations. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2024-38708 · Unknown · Laravel Property Management System

Name of the Vulnerable Software and Affected Versions: Laravel Property Management System version 1.0 Description: A critical issue affects the upload function of the PropertiesController.php file, allowing for unrestricted file upload through the manipulation of the file argument. This can be...

SUSE CVE-2024-42319

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devmmboxcontrollerregister after devmpmruntimeenable When mtk-cmdq unbinds, a WARNON message with condition pmruntimegetsync 0 occurs. According to the call tracei below: cmdqmboxshutdown mboxfreechannel...

DEBIAN-CVE-2024-42319

In the Linux kernel, the following vulnerability has been resolved: mailbox: mtk-cmdq: Move devmmboxcontrollerregister after devmpmruntimeenable When mtk-cmdq unbinds, a WARNON message with condition pmruntimegetsync 0 occurs. According to the call tracei below: cmdqmboxshutdown mboxfreechannel...

CVE-2024-7646

The CVE-2024-7646 entry concerns ingress-nginx where an actor with permission to create Ingress objects can bypass annotation validation to inject arbitrary commands and obtain the controller’s credentials. The default configuration credential reportedly has access to all secrets in the cluster. ...