1880 matches found
CVE-2024-41004 tracing: Build event generation tests only as modules
In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock get a reference those event file reference in module init function, and unlock and delete it in module...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a kernel crash caused by the mm/hugememory component not properly handling a poisoned hugezerofolio when handling memory failure tests...
PT-2024-29193 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the issue introduced in version 5 of TCP-AO patches Description: The issue is related to a leak of ao info on the error path in the net/tcp ao component of the Linux kernel...
Oracle Linux 9 : buildah (ELSA-2024-4371)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4371 advisory. - rebuild for CVE-2024-1394 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
CVE-2024-35234 Discourse vulnerable to stored-dom XSS via Facebook Oneboxes
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch and version 3.3.0.beta3 on the tests-passed branch, an attacker can execute arbitrary JavaScript on users’ browsers by posting a specific URL containing maliciously crafted meta tags. This issue only...
PT-2024-26909 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches Description: The issue affects moderators using the review queue, allowing them to see a user's email address...
PT-2024-27341 · Discourse +1 · Discourse +1
Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.2.3 on the stable branch Discourse versions prior to 3.3.0.beta4 on the beta and tests-passed branches Description: Discourse is an open-source discussion platform. A malicious actor could get the FastImage libra...
CLSA-2024-1719925589 openssl: Fix of 2 CVEs
CVE-2022-1292: crehash: Do not use shell to invoke openssl to prevent command injection - CVE-2022-2068: crehash: Fix file operations to prevent command injection - Update expired smime certificates - Add testing using old certificates sha1 to have both types of certificates sha1, sha256 checked...
CVE-2024-39298 mm/memory-failure: fix handling of dissolved but not taken off from buddy pages
In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix handling of dissolved but not taken off from buddy pages When I did memory failure tests recently, below panic occurs: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8cee00 flags:...
Malicious code in acceptance-tests_support (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6333 Malicious code in acceptance-tests_support (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockсore.IntegratioոTests.Common (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bloсkcore.Tests.Commoո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bloсkcorе.Tests.Commоո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gltf-blender-io-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2424 Malicious code in gltf-blender-io-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)
--- -= Per source details. Do not edit below this line.=-...