MAL-2024-7692 Malicious code in sap-attr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a59ce389b5949cf7bf1c25f52760579b8f39915fefd0b646fab91cdf176d0ef2 The OpenSSF Package Analysis project identified 'sap-attr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-6718 Malicious code in attr-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in attr-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in attr-searchable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6717 Malicious code in attr-searchable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()

A flaw was found in the Linux kernel. A potential memleak in paprgetattr may lead to compromised availability...

UBUNTU-CVE-2023-52746

In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrmxlate32attr int type = nlatypenla; if type XFRMAMAX return -EOPNOTSUPP; @type is then used as an array index and can be used as a Spectre v1 gadget. if nlalennla...

SUSE CVE-2024-27407

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fixed overflow check in mienumattr...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an overflow problem discovered via the mienumattr function...

DEBIAN-CVE-2024-29161

HDF5 through 1.14.3 contains a heap buffer overflow in H5Aattrreleasetable, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

SUSE CVE-2024-29161

HDF5 through 1.14.3 contains a heap buffer overflow in H5Aattrreleasetable, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

CVE-2024-2504

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attr' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

PT-2024-29172 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A slab-out-of-bounds issue has been resolved in the Linux kernel, specifically in the ext4 file system. This issue can be triggered by setting an oversized value for s mb group preallo...

The vulnerability of the log_entry_attr function in the 389-ds-base component of the Red Hat Enterprise Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the logentryattr function in the 389-ds-base component of the Red Hat Enterprise Linux operating system is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el8 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

SUSE CVE-2009-1711

WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document...

SUSE CVE-2009-3234

Buffer overflow in the perfcopyattr function in kernel/perfcounter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial of service crash and execute arbitrary code via a "big size data" to the perfcounteropen system call...

SUSE CVE-2014-9903

The schedreadattr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local users to obtain sensitive information from kernel stack memory via a crafted schedgetattr system call...

SUSE CVE-2017-9052

An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfformsdata is due to a failure to check a pointer for being in bounds in a few places in this function and a failure in a check in dwarfattrlist...

SUSE CVE-2018-13098

An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service slab out-of-bounds read and BUG can occur for a modified f2fs filesystem image in which FIEXTRAATTR is set in an inode...