CVE-2024-12021

CVE-2024-12021 affects Coverity versions prior to 2024.9.0 and is a stored cross-site scripting (XSS) vulnerability in various administrative interfaces. The underlying impact, as stated, can include the compromise of local accounts managed by the Coverity platform and other standard XSS effects....

CVE-2024-12021 Stored Cross-Site Scripting

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting XSS in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site...

CVE-2024-12021 Stored Cross-Site Scripting

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting XSS in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site...

Black Duck Coverity 跨站脚本漏洞

Black Duck Coverity is a comprehensive static code analysis and software security tool from Black Duck, Inc. It is used to find and fix vulnerabilities, defects and security risks in software. A cross-site scripting vulnerability exists in versions prior to Black Duck Coverity 2024.9.0, which...

Linux Distros Unpatched Vulnerability : CVE-2024-49922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check null pointers before using them WHAT & HOW These pointers are null checked previously in the same function, indicating they might be null...

Linux Distros Unpatched Vulnerability : CVE-2024-49898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check null-initialized variables WHAT & HOW drrtiming and subvppipe are initialized to null and they are not always assigned new values. It is...

Linux Distros Unpatched Vulnerability : CVE-2024-49920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc and dc-bwvbios, are null checked previously in the same functio...

Linux Distros Unpatched Vulnerability : CVE-2024-46814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check msgid before processing transcation WHY & HOW HDCPMESSAGEIDINVALID -1 is not a valid msgid nor is it a valid array index, and it needs...

Linux Distros Unpatched Vulnerability : CVE-2024-42090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: fix deadlock in createpinctrl when handling -EPROBEDEFER In createpinctrl, pinctrlmapsmutex is acquired before calling addsetting. If addsetting return...

Linux Distros Unpatched Vulnerability : CVE-2024-42121

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check index msgid before read or write WHAT msgid is used as an array index and it cannot be a negative value, and therefore cannot be equal to...

Linux Distros Unpatched Vulnerability : CVE-2024-44931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpiodevicegetdesc Userspace may trigger a...

SUSE CVE-2024-58015

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer using printarraytobufindex function. Array length parameter passed to the function is too big, resulting in possible out-of bound memory error...

CVE-2024-52557

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

UBUNTU-CVE-2024-52557

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

UBUNTU-CVE-2024-58015

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placed in a buffer using printarraytobufindex function. Array length parameter passed to the function is too big, resulting in possible out-of bound memory error...

CVE-2024-52557

The CVE-2024-52557 entry concerns the Linux kernel DRM component zynqmp_dp: rate calculation overflow in zynqmp_dp_rate_get(). The issue arises when drm_dp_bw_code_to_link_rate(dp->test.bw_code) is multiplied by 10000 under 32-bit arithmetic, risking an integer overflow; the patch converts the...

CVE-2024-52557 drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

CVE-2024-52557 drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

CVE-2024-52557 drm: zynqmp_dp: Fix integer overflow in zynqmp_dp_rate_get()

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

CVE-2024-52557

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...