AZL-47928 CVE-2024-41001 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

UBUNTU-CVE-2024-41001

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

CVE-2024-41001

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

CVE-2024-41001 io_uring/sqpoll: work around a potential audit memory leak

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

CVE-2024-41001

CVE-2024-41001: In the Linux kernel, io_uring/sqpoll may leak audit memory during connect handling due to path conditions in prep/issue auditing; a blanket NOP before SQPOLL mitigates this. The issue, rated CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, is locally exploitable and impacts availabi...

CVE-2024-41001 io_uring/sqpoll: work around a potential audit memory leak

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

CVE-2024-41001

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 size 128: comm "iou-sqp-455", pid 457, jiffies 4294894164...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a potential audit memory leak in the iouring/sqpoll component...

Decidim cross-site scripting (XSS) in the pagination

Impact The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. Patches Not available Workarounds Not available References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized...

GHSA-7CX8-44PC-XV3Q Decidim cross-site scripting (XSS) in the pagination

Impact The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. Patches Not available Workarounds Not available References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized...

Decidim cross-site scripting (XSS) in the pagination

Impact The pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter perpage. Patches Patched in version 0.27.6 and 0.28.1 References OWASP ASVS v4.0.3-5.1.3 Credits This issue was discovered in a security audit organized by...

Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US

No description provided...

Code Issue Vulnerability in DAR-7000 at AUO Electronic Devices (Shanghai) Co.

DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. AUO Electronic Devices Shanghai Co. A code issue vulnerability exists in the DAR-7000, which stems from the file parameter of /log/decodmail.php being able to deserialize certain content. No details of the vulnerability are...

Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability is due to Mattermost failing to sanitize the RemoteClusterFrame payloads before audit logging them. Attackers with access to the audit logs can exploit this to read message contents...

CVE-2024-39353

Mattermost versions 9.5.x = 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents...

CVE-2024-39353

Mattermost Server vulnerability CVE-2024-39353 affects versions 9.5.x (

CVE-2024-39353 RemoteClusterFrame payloads are audit logged in full

Mattermost versions 9.5.x = 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents...

CVE-2024-39353 RemoteClusterFrame payloads are audit logged in full

Mattermost versions 9.5.x = 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents...

CVE-2024-39353 RemoteClusterFrame payloads are audit logged in full

Mattermost versions 9.5.x = 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents...

PT-2024-28468 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost version 9.8.0 Description: The issue allows a high-privileged attacker with access to the audit logs to read message contents due to the failure to sanitize the RemoteClusterFrame payloads...