Cybozu Garoon Information Disclosure Vulnerability (CNVD-2024-29669)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon. The vulnerability is caused due to a browsing...

The vulnerability of the drm_sched_entity_init() function in the Linux kernel’s drivers/gpu/drm/scheduler/sched_entity.c file allows a hacker to cause a service failure.

The vulnerability of the drmschedentityinit function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `taprio_parse_tc_entry()` function in the `net/sched/sch_taprio.c` module, part of the network scheduling subsystem of the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the taprioparsetcentry function in the net/sched/schtaprio.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2024-34816

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

Microsoft Windows Task Scheduler 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Task Scheduler. The following products and versions are affected:Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 fo...

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-3167 Improper handling of data in Mail CWE-231 - CVE-2024-31397 CyVDB-3221 Improper restriction on the output of some API CWE-201 - CVE-2024-31398 CyVDB-3238 Excessive resource consumption in Mai...

Cybozu Garoon 安全漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon. The vulnerability is caused due to a browsing...

CVE-2024-34816

CVE-2024-34816 is a CSRF vulnerability in the Revmakx WPCal.Io – Easy Meeting Scheduler WordPress plugin (WPCal.io) versions

PT-2024-26212 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software. This type of issue allows an attacker to trick a user into performing unintended actions on a we...

WordPress WPCal.io – Easy Meeting Scheduler Plugin <= 0.9.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software WPCal.io – Easy Meeting Scheduler Type Plugin Vulnerable versions = 0.9.5.8 Fixed in 0.9.5.9 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-34816 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 362a10aa888b Credits Maj...

UBUNTU-CVE-2024-27010

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix mirred deadlock on device recursion When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to self we hit a qdisc lock deadlock. See trace below. ..... other info removed f...

kernel: block, bfq: Fix division by zero error on zero wsum

A division by zero error was found in the BFQ I/O scheduler. When the weighted sum of I/O priorities becomes zero, the limit calculation divides by zero, causing a kernel crash...

kernel: drm/amdgpu: drop redundant sched job cleanup when cs is aborted

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: drop redundant sched job cleanup when cs is aborted Once command submission failed due to userptr invalidation in amdgpucssubmit, legacy code will perform cleanup of scheduler job. However, it's not needed at all, as...

kernel: Linux kernel: Denial of Service in DRM scheduler due to improper work queue handling

A flaw was found in the Linux kernel's Direct Rendering Manager DRM scheduler. A local attacker with low privileges could exploit this vulnerability by triggering a GPU reset test. This improper handling of the scheduler work queue can lead to a kernel panic, which is a system crash, resulting in...

CVE-2022-48639

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tcnewtfilter tfilterput need to be called to put the refount got by tp-ops-get to avoid possible refcount leak when chain-tmpltops != NULL and chain-tmpltops != tp-ops...

RHEL 7 : openstack-nova (RHSA-2018:0241)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0241 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

CVE-2024-32795

Cross-Site Request Forgery CSRF vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8...

CVE-2024-32795

CVE-2024-32795 describes a Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler. Connected sources indicate the issue affects the WPCal.Io – Easy Meeting Scheduler product and specifically cites versions from n/a through 0.9.5.8. The available documents do ...

PT-2024-24868 · Unknown · Revmakx Wpcal.Io – Easy Meeting Scheduler

Name of the Vulnerable Software and Affected Versions: Revmakx WPCal.Io – Easy Meeting Scheduler versions 0.9.5.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge...

kernel: net/sched: sch_hfsc UAF

A use-after-free flaw was found in the Linux kernel's net/sched: schhfsc HFSC qdisc traffic control component that can be exploited to achieve local privilege escalation. If a class with a link-sharing curve, for example, with the HFSCFSC flag set, has a parent without a link-sharing curve, then...