SUSE CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

CVE-2024-11346

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

CVE-2024-11346 Access of Resource Using Incompatible Type in Postscript interpreter

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

CVE-2024-11346 Access of Resource Using Incompatible Type in Postscript interpreter

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

CVE-2024-11346

CVE-2024-11346 affects Lexmark printers (CX, XC, CS, and related models) via the Postscript interpreter modules. The issue is a type confusion vulnerability in the Postscript interpreter that allows Resource Injection . Public sources corroborate that an attacker could potentially execute arbitra...

Lexmark 安全漏洞

Lexmark is a series of printers from Lexmark, a US company. A security vulnerability exists in Lexmark that stems from the presence of a resource use type incompatibility that can lead to resource injection...

PT-2025-6504 · Lexmark · Lexmark International Xc

Name of the Vulnerable Software and Affected Versions: Lexmark International CX, XC, CS, et. Al. versions 001.001:0 through 081.231 Lexmark International CX, XC, CS, et. Al. versions ..P001 through ..P233 Lexmark International CX, XC, CS, et. Al. versions ..P001 through ..P759 Lexmark Internation...

CVE-2024-11346: Access of Resource Using Incompatible Type

: Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in Lexmark International CX, XC, CS, et. Al. Postscript interpreter modules allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from ..P001 through ..P233, from ..P001 through...

Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service

Summary Numerous fixes to the Linux kernel for reported issues related to various security vulnerabilities such as demnial of service, unauthorized access, or leakage of sensitive data. Vulnerability Details CVEID:CVE-2020-26555 DESCRIPTION: Bluetooth Core and Mesh Specifications could allow a...

CVE-2025-0625

CVE-2025-0625 affects CampCodes School Management Software 1.0, specifically the Attachment Handler component. The vulnerability arises from improper control of resource identifiers, enabling an attacker to manipulate identifiers remotely. Descriptions consistently indicate remote exploitability ...

CVE-2025-0625 CampCodes School Management Software Attachment resource injection

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-0625 CampCodes School Management Software Attachment resource injection

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

PT-2024-41806

Уязвимость функции ionic dev teardown модуля drivers/net/ethernet/pensando/ionic/ionic dev.c драйвера поддержки сетевых адаптеров Ethernet Pensando ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволи...

PT-2024-41818

Уязвимость функции free cached dir модуля fs/smb/client/cached dir.c поддержки клиента SMB ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2024-41620

Уязвимость функции xe oa release модуля drivers/gpu/drm/xe/xe oa.c - драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости может позволить нарушителю вызвать...

CVE-2024-10491

A flaw was found in the Express Node.js framework. In certain versions, an attacker may be able to trigger an arbitrary resource injection attack via the link header when unsanitized data is used...

Express ressource injection

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

GHSA-CM5G-3PGC-8RG4 Express ressource injection

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...

UBUNTU-CVE-2024-10491

A vulnerability has been identified in the Express response.links function, allowing for arbitrary resource injection in the Link header when unsanitized data is used. The issue arises from improper sanitization in Link header values, which can allow a combination of characters like ,, ;, and to...