CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

CVE-2024-30845

A Cross Site Scripting (XSS) vulnerability exists in Rainbow external link network disk v.5.5 , a PHP-based network disk and external link sharing program. A remote attacker can achieve arbitrary code execution by exploiting the validation component of the input parameters . To mitigate risk, it ...

CVE-2024-30845

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

CVE-2024-30845: Improper Control of Generation of Code

Cross Site Scripting vulnerability in Rainbow external link network disk v.5.5 allows a remote attacker to execute arbitrary code via the validation component of the input parameters...

rear: creates a world-readable initrd

A vulnerability has been identified in Relax-and-Recover ReaR, where the use of GRUBRESCUE=y results in the creation of an initrd that is readable by anyone. This flaw could potentially enable local attackers to obtain access to system secrets that are typically restricted to root privileges...

Driver Disk for Qlogic qla2xxx 10.02.11.00-k - For Citrix Hypervisor 8.2 Cumulative Update 1 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 Cumulative Update 1 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- qla2xxx| Fibre Channel HBA/Storage Controller|...

PT-2024-26798

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.9 Description The issue is related to the btrfs file system in the Linux kernel. It was discovered that the kernel did not properly set the WRITTEN flag on all metadata blocks, which could lead to corruption ...

CVE-2024-24279

An issue in secdiskapp 1.5.1 management program for NewQ Fingerprint Encryption Super Speed Flash Disk allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions...

NewQ Flash Disk 安全漏洞

NewQ Flash Disk is a fingerprint unlocked flash disk. A security vulnerability exists in NewQ Flash Disk that originates from allowing an attacker to escalate privileges via the vsVerifyPassword and vsSetFingerPrintPower functions...

PT-2024-20336 · Newq · Secdiskapp

Name of the Vulnerable Software and Affected Versions: secdiskapp version 1.5.1 Description: An issue in the management program for NewQ Fingerprint Encryption Super Speed Flash Disk allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower functions...

CVE-2024-24279

The secdiskapp 1.5.1 management program, used for the NewQ Fingerprint Encryption Super Speed Flash Disk , contains a security vulnerability that allows attackers to gain escalated privileges . The flaw originates from the vsVerifyPassword and vsSetFingerPrintPower functions. As a temporary worka...

PT-2024-29160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition between hole punching and AIO+DIO in the ocfs2 filesystem. When ocfs2 dio wr get block is called to add unwritten extents to a list and another...

PT-2024-6463 · D Link · D-Link Dns-321 +16

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 up to 20240814 Description: A...

Cross Site Request Forgery (CSRF)

github.com/mudler/localai is vulnerable to Cross Site Request Forgery CRSF. The vulnerability is due to a lack of CSRF tokens, allowing an attacker to host malicious JavaScript on a host. When visited by a LocalAI user, this could allow the attacker to fill disk space to deny service or abuse...

PT-2024-21498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential deadlock in the Linux kernel for raid456 has been identified. The issue occurs when a reshape is interrupted, and a disk is set to WantReplacement, with a new disk added to...

The vulnerability of Hitachi Disk Array Systems, related to the disclosure of information through registration files, allows a perpetrator to disclose protected information.

The vulnerability of Hitachi Disk Array Systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

LocalAI cross-site request forgery vulnerability

A Cross-Site Request Forgery CSRF vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform unauthorized actions on the victim's local LocalAI instance without their consent. This vulnerability enables attackers ...

CVE-2024-3135

A Cross-Site Request Forgery CSRF vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform unauthorized actions on the victim's local LocalAI instance without their consent. This vulnerability enables attackers ...

CVE-2024-3135

Technical details (affected products/versions, root cause, fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources reiterate CSRF risk but lack version-specific remediation information.