UBUNTU-CVE-2024-49892

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytesperelementy & bytesperelementc are initialized by getbytesperelement whic...

UBUNTU-CVE-2024-49900

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in eabuffer syzbot reports that lzo1x1docompress is using uninit-value: ===================================================== BUG: KMSAN: uninit-value in lzo1x1docompress+0x19f9/0x2510...

SUSE CVE-2024-49862

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix off by one in getrpi The rp-priv-rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the needs to be = to prevent an off by one access...

AZL-50913 CVE-2024-49862 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix off by one in getrpi The rp-priv-rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the needs to be = to prevent an off by one access...

DEBIAN-CVE-2024-49862

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix off by one in getrpi The rp-priv-rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the needs to be = to prevent an off by one access...

AZL-50785 CVE-2024-47737 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: call cacheput if xdrreservespace returns NULL If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with...

DEBIAN-CVE-2024-47737

In the Linux kernel, the following vulnerability has been resolved: nfsd: call cacheput if xdrreservespace returns NULL If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with...

UBUNTU-CVE-2024-47737

In the Linux kernel, the following vulnerability has been resolved: nfsd: call cacheput if xdrreservespace returns NULL If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds issue in the getrpi function of the intelrapl driver in the powercap component...

CVE-2024-10195

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goformgetcmdprocess of the component SMS Check. The manipulation of the argument orderby leads to sql injection...

CVE-2024-10170

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file getdoctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. T...

Hospital Management System SQL注入漏洞

The Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from an SQL injection vulnerability...

PT-2024-16084 · Code Projects · Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue has been found in the Hospital Management System, affecting the processing of the file get doctor.php. The manipulation of the specilizationid argument leads t...

PT-2024-37040

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the octeontx2-pf module. The issue was due to not checking error pointers after calling otx2 mbox get rsp in otx2...

MAL-2024-9641 Malicious code in get-hydrated-cms-data (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in get-hydrated-cms-data (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2022-4974

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the getdebuglog, getdboption, and the setdboption functions in versions up to, and...

kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()

A vulnerability was found in the Linux kernel's IPv6 handling in the xfrm6getsaddr function, where the issue occurs when ip6dstidev returns NULL, leading to a null pointer dereference and resulting in a general protection fault...

PT-2024-7338 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of the Cisco ATA 190 Series Analog Telephone Adapter firmware. This...

Cisco ATA 190 安全漏洞

The Cisco ATA 190 is an analog telephone adapter from Cisco USA. A security vulnerability exists in the Cisco ATA 190 that originates when the HTTP server allows state changes in GET requests. An unauthenticated, remote attacker could exploit this vulnerability to modify the configuration or rebo...