CVE-2024-44572

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysmgmt function...

CVE-2024-44574

RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain a command injection vulnerability via the sysconf function...

nvme: fix reconnection fail due to reserved tag allocation

...

kernel: nvme: avoid double free special payload

A flaw was found in the Linux kernel's NVMe component. This vulnerability is due to a double free error that occurs when a discard request needs to be retried and fails before a new special payload is added. A local attacker could exploit this memory corruption issue to cause a denial of service...

Relyum RELY-PCIe 安全漏洞

The Relyum RELY-PCIe is an intelligent pluggable board from the Spanish company Relyum. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from the sysconf function containing a command injection vulnerability...

Relyum RELY-PCIe 安全漏洞

The Relyum RELY-PCIe is an intelligent pluggable board from the Spanish company Relyum. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from a command injection vulnerability contained in the timedate function...

serve-static vulnerable to template injection that can lead to XSS

Impact passing untrusted user input - even after sanitizing it - to redirect may execute untrusted code Patches this issue is patched in serve-static 1.16.0 Workarounds users are encouraged to upgrade to the patched version of express, but otherwise can workaround this issue by making sure any...

GHSA-CM22-4G7W-348P serve-static vulnerable to template injection that can lead to XSS

Impact passing untrusted user input - even after sanitizing it - to redirect may execute untrusted code Patches this issue is patched in serve-static 1.16.0 Workarounds users are encouraged to upgrade to the patched version of express, but otherwise can workaround this issue by making sure any...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +12377 more potentially affected by CVE-2024-43796 via express (>=4.0.0, <=4.19.2)

express NPM version =4.0.0, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.0.28, =0.0.36 and more Source cves: CVE-2024-43796 Source advisory: GHSA-QW6H-VGH9-J6WX...

@coder/code-server-pr (>=0.0.0-5720-b0b6a997d711d1596cd75597cb51aefe64be150e, <=4.8.3-5762-deebf96f942f25d874570d654b2baa91e77c5967), @daiyu-5577/quickbuild (>=1.2.1, <=2.6.8) +34 more potentially affected by CVE-2024-43796 via express (>=5.0.0-alpha.2, <=5.0.0-beta.3)

express NPM version =5.0.0-alpha.2, =0.0.0-5720-b0b6a997d711d1596cd75597cb51aefe64be150e, =1.2.1, =3.0.0-alpha.1, =3.0.0-alpha.1, =3.0.3, =4.2.0, =0.2.0, =0.0.1, =1.2.1-alpha.60, =0.1.0, =0.55.1, =2.0.0-2, =2.0.0-1, =0.5.9, =0.0.13-12a6a820047e3132ee61831695cef6c364501b06, =1.0.9 and more Source...

01-numacert (>=1.0.0, <=3.0.0), 10by10-react-app (1.2.1) +12377 more potentially affected by CVE-2024-43796 via express (>=4.0.0, <=4.19.2)

express NPM version =4.0.0, =1.0.0, =1.0.1, =1.0.3, =0.2.0, =1.0.2, =1.0.0, =2.0.0, =0.2.0, =0.2.0, =0.0.28, =0.0.36 and more Source cves: CVE-2024-43796 Source advisory: OSV:GHSA-QW6H-VGH9-J6WX...

express vulnerable to XSS via response.redirect()

Impact In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code Patches this issue is patched in express 4.20.0 Workarounds users are encouraged to upgrade to the patched version of express, but otherwise can workaround this issu...

GHSA-QW6H-VGH9-J6WX express vulnerable to XSS via response.redirect()

Impact In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code Patches this issue is patched in express 4.20.0 Workarounds users are encouraged to upgrade to the patched version of express, but otherwise can workaround this issu...

AZL-49053 CVE-2024-43796 affecting package python-tensorboard for versions less than 2.16.2-5

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

AZL-49152 CVE-2024-43796 affecting package nodejs-nodemon 2.0.3-5

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

AZL-49091 CVE-2024-43796 affecting package nodejs-nodemon 2.0.3-4

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

DEBIAN-CVE-2024-43796

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

AZL-49135 CVE-2024-43796 affecting package reaper for versions less than 3.1.1-12

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

CVE-2024-43796 express vulnerable to XSS via response.redirect()

Express.js minimalist web framework for node. In express 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect may execute untrusted code. This issue is patched in express 4.20.0...

path-to-regexp outputs backtracking regular expressions

Impact A bad regular expression is generated any time you have two parameters within a single segment, separated by something that is not a period .. For example, /:a-:b. Patches For users of 0.1, upgrade to 0.1.10. All other users should upgrade to 8.0.0. These versions add backtrack protection...