AZL-53391 CVE-2024-50145 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: octeonep: Add SKB allocation failures handling in octepoqprocessrx buildskb returns NULL in case of a memory allocation failure so handle it inside octepoqprocessrx to avoid NULL pointer dereference. octepoqprocessrx is called...

NVIDIA BlueField License Issue Vulnerability

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the bpf component internally overlapping with the UAPI bpfredirect flag when processing bpfredirectinfo...

1000 Projects Bookstore Management System 注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which originates from an SQL injection vulnerability in the fnm parameter of the...

The vulnerability of the QuRouter operating system for QNAP network devices is related to errors in processing input data, allowing attackers to execute arbitrary code.

The vulnerability of the QuRouter operating system for QNAP network devices is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 9 : openexr (RHSA-2024:8801)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8801 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a...

ROS-20241106-01

Vulnerability of the supply component of the Linux kernel is related to resource management errors in the bq27xxxbatteryi2cremove function in drivers/power/supply/bq27xxxbatteryi2c.c. Exploitation of the of the vulnerability could allow an attacker to cause a denial of service A vulnerability in...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

A flaw was found in the Spring framework package. A maliciously crafted Spring Expression Language SePL may trigger uncontrolled CPU usage, leading to a denial of service in the application consuming it. To be considered vulnerable, one application has to evaluate user-supplied SpEL expressions...

CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-51522

CVE-2024-51522 affects Huawei HarmonyOS in the Device Management Module, caused by improper processing of device information. The vulnerability potentially impacts availability (per NVD and Red Hat records); CVSS details indicate LOCAL attack with low complexity and no user interaction, but the e...

CVE-2024-51522

Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-10809

CVE-2024-10809 impacts the Code-Projects E-Health Care System v1.0. The vulnerability lies in the web endpoint /Doctor/chat.php, where manipulating the parameters name (and by indication, also message ) enables an SQL injection. This remote-access issue is described across multiple sources (NVD, ...

kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...

Unspecified Vulnerability in IBM TXSeries for Multiplatforms (CNVD-2024-43182)

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A security vulnerability exists in IBM TXSeries for Multiplatforms version 10.1, which...

PT-2024-33199 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Power BI version 4.0.0.3 Description: An issue in Lens Visual integration with Power BI allows a remote attacker to execute arbitrary code via the Natural language processing component. Recommendations: For Power BI version 4.0.0.3, consider...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

CVE-2024-48746

CVE-2024-48746 affects Lens Visual integration with Power BI v4.0.0.3. The issue allows a remote attacker to execute arbitrary code via the Natural Language Processing component. The vulnerability is described across multiple sources (NVD/Red Hat/CNNVD) with a high impact and CVSS v3.1 base score...

PT-2024-34686 · Unknown · Device Management Module

Name of the Vulnerable Software and Affected Versions: Device Management Module affected versions not specified Description: The issue is related to improper device information processing in the device management module. Successful exploitation of this issue may affect system availability...

Lens Visual integration with Power BI 安全漏洞

Lens Visual integration with Power BI is a program from Lens Visual, Inc. Enhances Power BI dashboards with OpenAI and ChatGPT. A security vulnerability exists in Lens Visual integration with Power BI version v.4.0.0.3, which originates from a vulnerability that could allow a remote attacker to...