SUSE-SU-2024:4053-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

DEBIAN-CVE-2024-46862

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

UBUNTU-CVE-2024-46862

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

CVE-2024-46862

CVE-2024-46862 relates to the Linux kernel ASoC: Intel soc-acpi-intel-mtl-match fix. The issue arises from handling an empty item in the snd_soc_acpi_link_adr array due to the absence of a links_num field in struct snd_soc_acpi_mach, which affected the end-of-loop condition in hda_sdw_machine_sel...

CVE-2024-46862 ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

PT-2024-32256 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ASoC: Intel: soc-acpi-intel-mtl-match component in the Linux kernel. There is no links num in the struct snd soc acpi mach and the code tests !link-num adr ...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

CVE-2006-2643

CVE-2006-2643 is an XSS vulnerability in Monster Top List (MTL) 1.4, exposed via the user_error_message parameter in index.php. The available documents confirm the affected software (MTL 1.4) and the vulnerable entry point (index.php), but do not provide additional technical details such as concr...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...