afarray (>=0.1.0, <=0.15.1), b-table (>=0.1.0, <=0.2.1) +43 more potentially affected by unknown CVE via get-size (>=0.1.3, <=0.1.4)

get-size CARGO version =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.8.0, =0.1.0, =0.3.1, =0.3.3, =0.1.0, =0.9.1, =0.14.0 - pathlink 0.1.0 - poseidon-bn128 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0425...

get-size is unmaintained

get-size's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo. get-size also depends on get-size-derive 0.1.3, which uses attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error. Possible...

get-size-derive is unmaintained

get-size-derive's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo. get-size-derive also depends on attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error. Possible Alternatives - get-size-deri...

SUSE CVE-2024-46685

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

SUSE CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

CVE-2024-6137 BT: Classic: SDP OOB access in get_att_search_list

BT: Classic: SDP OOB access in getattsearchlist...

AZL-49286 CVE-2024-46685 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

DEBIAN-CVE-2024-46685

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

UBUNTU-CVE-2024-46694

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state-fb-obj0 directly, get object from framebuffer by calling drmgemfbgetobj and return error code when object is null to avoid using null object of...

UBUNTU-CVE-2024-46692

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Mark getwqctx as atomic call Currently getwqctx is wrongly configured as a standard call. When two SMC calls are in sleep and one SMC wakes up, it calls getwqctx to resume the corresponding sleeping thread. B...

PT-2024-37412

Name of the Vulnerable Software and Affected Versions: BT: Classic affected versions not specified Description: The issue concerns an SDP OOB access vulnerability in the get att search list function of BT Classic. Recommendations: At the moment, there is no information about a newer version that...

The vulnerability of the get_edge() function in the ospf_te.c file of the OSPF Daemon component of the FRRouting software for Unix-like systems allows a attacker to cause a service failure.

The vulnerability of the getedge function in the ospfte.c file of the OSPF Daemon component, a networking routing implementation software for Unix-like systems, is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node

...

drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes

...

exfat: fix potential deadlock on __exfat_get_dentry_set

...

CVE-2024-42310

...

CVE-2024-42309

...

Heating Network Wireless Monitoring System SQL注入漏洞

Star Measurement and Control Heating Network Wireless Monitoring System is a heating management system from Star Measurement and Control. A SQL injection vulnerability exists in Heating Network Wireless Monitoring System version 5.6.2, which stems from an operation of the GetDataKindByType functi...

CVE-2024-44893

An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request...

CVE-2024-31490

CVE-2024-31490 affects Fortinet FortiSandbox products (FortiSandbox 4.4.0–4.4.4; 4.2.1–4.2.6; 4.0 all versions; 3.2.2–3.2.4; 3.1.5). The issue is an information disclosure via HTTP GET requests, enabling an attacker to access sensitive information. The connected documents confirm the affected ver...