ZhongBangKeJi CRMEB security vulnerabilities

ZhongBangKeJi CRMEB is an open source e-commerce management system from China ZhongBang Technology ZhongBangKeJi. A security vulnerability exists in ZhongBangKeJi CRMEB v5.4.0, which originates from an arbitrary file read vulnerability in the savebasics function. An attacker can exploit this...

Malicious code in viewercontext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d130e5ac790b05038b23ecd7f937fd9b35a2ddc5696e069991b3f620e23c308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52307

authentik is an open-source identity provider. Due to the usage of a non-constant time comparison for the /-/metrics/ endpoint it was possible to brute-force the SECRETKEY, which is used to authenticate the endpoint. The /-/metrics/ endpoint returns Prometheus metrics and is not intended to be...

CVE-2024-52289 authentik has an insecure default configuration for OAuth2 Redirect URIs

authentik is an open-source identity provider. Redirect URIs in the OAuth2 provider in authentik are checked by RegEx comparison. When no Redirect URIs are configured in a provider, authentik will automatically use the first redirecturi value received as an allowed redirect URI, without escaping...

Unspecified vulnerability in Linux kernel (CNVD-2024-46460)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing buffer index check. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46457)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from memory reuse after release. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46428)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from an execution queue leak. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46421)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a device already hanging at runtime when the system hangs. No details of the vulnerability are provided at...

Unspecified vulnerability in Linux kernel (CNVD-2024-46419)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from faulty block size validation in the sctpsfootb function. No details of the vulnerability are provided at thi...

Unspecified vulnerability in Linux kernel (CNVD-2024-46417)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not locking XArray when fetching VM entries.No details of the vulnerability are available at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46391)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the idpfvccoreinit error path. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46411)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly checking the encoder in intelhdcpgetcapability.No details of the vulnerability are provided at...

Unspecified vulnerability in Linux kernel (CNVD-2024-46447)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the xainsert function using the wrong path. No details of the vulnerability are provided at this time...

Nextcloud Resource Management Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from a resource management error vulnerability that stems from the fact that due to a pre-sent HEAD request, the link reference provider...

Unspecified vulnerability in Linux kernel (CNVD-2024-46450)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...

1000 Projects Beauty Parlour Management System security vulnerabilities

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the pagetitle parameter that can lead t...

Unspecified vulnerability in Linux kernel (CNVD-2024-46429)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that placing packets into a dql queue after the dma engine has been started can result in a...

Authentik security vulnerabilities

authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the presence of an insecure default configuration of OAuth2 redirect URIs, which could allow an attacker to gain undue privileges or perform...

Unspecified vulnerability in Linux kernel (CNVD-2024-46393)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from memory reuse after release. No details of the vulnerability are provided at this time...

Unspecified vulnerability in Linux kernel (CNVD-2024-46426)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an RCU usage warning during mptcp socket creation. No details of the vulnerability are provided at this time...