2861 matches found
Harbor 授权问题漏洞
Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policies and role-based access control to ensure that images are scanned and are not vulnerable, and that images are signed as trusted. Harbor suffers from an authorization issue vulnerability that stems fr...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a label-based KASAN-enabled address launch issue...
OESA-2024-2296 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The panic below is observed when receiving ICMP packets with secmark set while an ICMP r...
SUSE CVE-2024-49941
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...
DEBIAN-CVE-2024-49941
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...
UBUNTU-CVE-2024-49941
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...
CVE-2024-49941 gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...
CVE-2024-49941: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix potential NULL pointer dereference in gpiodgetlabel In gpiodgetlabel, it is possible that srcudereferencecheck may return a NULL pointer, leading to a scenario where label-str is accessed without verifying if label...
CVE-2024-49296
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...
CVE-2024-49296
CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...
CVE-2024-49296: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...
WordPress plugin Custom Add to Cart Button Label and Link 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Custom Add to Cart Button Label and Link versions = 1.6.1...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-44958)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44958 advisory. - In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance schedsmtpresent...
CVE-2024-47490
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network based attacker to cause increased consumption of resources, ultimately resulting in a...
SUSE CVE-2024-47659
In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections: when a label 'foo' connects to a label 'bar' with tcp/ipv4, 'foo' always gets 'foo' in returned ipv4 packets. So, 1...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation of the vector-toc-toggle-button-label parameter. Remediation A fix was pushed into the master branch but not yet published. References - Gerrit Wikimedia - GitHub Commit - Wikimedia Phabricator...
DEBIAN-CVE-2023-45359
An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can have markup...
UBUNTU-CVE-2023-45359
An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but should be, because the line param can have markup...