UBUNTU-CVE-2024-26985

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in intelfbboframebufferinit Add a unreference bo in the error path, to prevent leaking a bo ref. Return 0 on success to clarify the success path. cherry picked from commit a2f3d731be3893e730417ae3190760fcaffdf...

CVE-2024-26985

CVE-2024-26985 affects the Linux kernel DRM/xe path, specifically the intel_fb_bo_framebuffer_init function where a Bo reference could leak. The connected advisories confirm the fix: add an unreference of the BO in the error path and return 0 on success to clarify the normal path. The change is d...

CVE-2024-26985

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in intelfbboframebufferinit Add a unreference bo in the error path, to prevent leaking a bo ref. Return 0 on success to clarify the success path. cherry picked from commit a2f3d731be3893e730417ae3190760fcaffdf...

UBUNTU-CVE-2024-26922

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearly Verify the parameters of amdgpuvmbomap/replacemap/clearingmappings in one common place...

CVE-2024-26922 drm/amdgpu: validate the parameters of bo mapping operations more clearly

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate the parameters of bo mapping operations more clearly Verify the parameters of amdgpuvmbomap/replacemap/clearingmappings in one common place...

PT-2024-21606 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.7/6.9-rc4 Description: A buffer overflow vulnerability has been identified in the intel fb bo framebuffer init function within the DRM component of the Linux kernel. This issue can be exploited to cause a...

CVE-2023-51951

SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file...

PT-2024-14336

Name of the Vulnerable Software and Affected Versions Stock Management System version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the id parameter in the "manage bo.php" file. This enables the attacker to potentially gain unauthorized access and control over t...

CVE-2023-47109 PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image...

CVE-2023-47109 PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image...

PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block

Impact When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image. When deleting the block from the BO, the file will be deleted. It is possible to make the website completely unavailable by removing...

MAL-2023-8195 Malicious code in @zettle-bo/customers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c222564ede1b67fef2b761bcbbfd8cb38be11a71c514a6d2e6efa1e7ca9b46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8201 Malicious code in @zettle-bo/pp-profile-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1620f673435e4da925d2327f2d50d0ab0b66532cdb1d19d87accae90da85ac3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d15f8bb2c4ca588ab243f077851d021201eb274122b32a38b91cc93d7d03d1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aa58a36545bf3bfb7acfdee7ca0ccfeef15bb87c3e2c31651f41e8fa9070026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8207 Malicious code in @zettle-bo/routes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aa58a36545bf3bfb7acfdee7ca0ccfeef15bb87c3e2c31651f41e8fa9070026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b961ea11cf720196d00489b643e7085441ce41efe9d21ef3d77b4f24c1238ef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/products (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ae659d6471ddd10c2df563bcbd87d95e83cd34677101c317b5246e9d19b14b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8197 Malicious code in @zettle-bo/direct-debit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e6f4aa58a67054f3bd6830bfbfd2e23c6e7bfe7c7ef070fc3306b2513844832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/receipts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f074405b00ebdd38c3d826a75574548f1f1b7c544506344f2fa7ecd28a210885 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...