JustEnoughItems 安全漏洞

JustEnoughItems JEI is a project and recipe viewing module for Minecraft by James Mitchell, an individual developer. A security vulnerability exists in JustEnoughItems version 19.5.0.33 and prior versions, which stems from an inability to validate Minecraft's slot index in JEI, which can lead to...

SUSE CVE-2024-43894

In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drmclientmodesetprobe In drmclientmodesetprobe, the return value of drmmodeduplicate is assigned to modeset-mode, which will lead to a possible NULL pointer dereference on failure of...

DEBIAN-CVE-2024-43894

In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drmclientmodesetprobe In drmclientmodesetprobe, the return value of drmmodeduplicate is assigned to modeset-mode, which will lead to a possible NULL pointer dereference on failure of...

UBUNTU-CVE-2024-43894

In the Linux kernel, the following vulnerability has been resolved: drm/client: fix null pointer dereference in drmclientmodesetprobe In drmclientmodesetprobe, the return value of drmmodeduplicate is assigned to modeset-mode, which will lead to a possible NULL pointer dereference on failure of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the return value of the drmmodeduplicate function in the drmclientmodesetprobe function,...

SUSE CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...

kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()

A vulnerability was found in the Linux kernel's networking subsystem in the actapi implementation within the tcfidrcheckalloc function, which lead to a possible infinite loop when multiple actions with the same index are added, causing the second request to block indefinitely while holding the...

PT-2024-38615 · WordPress · Themify Builder

Name of the Vulnerable Software and Affected Versions: Themify Builder plugin for WordPress versions up to, and including, 7.6.1 Description: The issue allows authenticated attackers with Contributor-level access and above to duplicate and view private or draft posts created by other users, due t...

GO-2023-1865 Vega's validators able to submit duplicate transactions in code.vegaprotocol.io/vega

Vega's validators able to submit duplicate transactions in code.vegaprotocol.io/vega...

PT-2024-11508 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2022-1443 - Apache HTTP Server SQL Injection", "Content": "CVE ID : CVE-2022-1443 Published : Aug. 19, 2024, 3:15 p.m. | 26 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1789. Reason: This candidate is ...

PT-2024-28431 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-39306 - Apache HTTP Server Cross-Site Scripting Vulnerability", "Content": "CVE ID : CVE-2024-39306 Published : Aug. 19, 2024, 2:15 p.m. | 33 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-39304...

SUSE CVE-2024-42309

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psbintellvdsgetmodes In psbintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

SUSE CVE-2024-42310

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...

DEBIAN-CVE-2024-42310

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...

UBUNTU-CVE-2024-42309

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in psbintellvdsgetmodes In psbintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a possible NULL pointer dereference on failure of...

UBUNTU-CVE-2024-42310

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference in cdvintellvdsgetmodes In cdvintellvdsgetmodes, the return value of drmmodeduplicate is assigned to mode, which will lead to a NULL pointer dereference on failure of drmmodeduplicate. Add...

PT-2024-14840 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2023-5888 - Apache Web Server Remote Command Execution Vulnerability", "Content": "CVE ID : CVE-2023-5888 Published : Aug. 16, 2024, 7:15 p.m. | 38 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7246...

PT-2024-12209 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2023-2920 - Apache Web Server Remote Code Execution Vulnerability", "Content": "CVE ID : CVE-2023-2920 Published : Aug. 16, 2024, 6:15 p.m. | 37 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1503. Reaso...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free CVE-2022-48666 In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. CVE-2024-36484 In the Linux kernel, the following...