The vulnerability of the hdmi_14_processTransaction() function in the amdgpu driver of the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hdmi14processTransaction function in the driver/gpu/drm/amd/display/dc/hdcp/hdcpmsg.c file of the amdgpu driver for the Linux operating system is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the dcn302_fpu_update_bw_bounding_box() function in the amdgpu kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcn302fpuupdatebwboundingbox function in the drivers/gpu/drm/amd/display/dc/dml/dcn302/dcn302fpu.c file of the amdgpu kernel in the Linux operating system is related to incorrect calculation of the index. Exploiting this vulnerability may allow an attacker to compromise t...

UBUNTU-CVE-2024-49933

In the Linux kernel, the following vulnerability has been resolved: blkiocost: fix more out of bound shifts Recently running UBSAN caught few out of bound shifts in the iocforgivedebts function: UBSAN: shift-out-of-bounds in block/blk-iocost.c:2142:38 shift exponent 80 is too large for 64-bit typ...

Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by Multiple Security Vulnerabilities

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana for Self-Hosted Standard Edition 281. Vulnerability Details CVEID:CVE-2022-41722 DESCRIPTION: Golang Go could allow a remote attacker to traverse directories on the system, caused by a flaw in the filepath.Clean...

Incorrect Calculation

github.com/ethereum/go-ethereum is vulnerable to an Incorrect Calculation. The vulnerability is due to a miscalculation of Proof of Work PoW generation caused by an error in the DAG creation process...

CVE-2024-9507 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.15.2 due to improper input validation within the iconUpload function. This...

CVE-2024-9507

CVE-2024-9507 concerns the WordPress plugin Bit Form (Contact Form by Bit Form) up to version 2.15.2. The issue arises from improper input validation in the iconUpload function, enabling authenticated attackers with Administrator-level access and above to perform a PHP filter chain attack and rea...

Announcing TruRisk™ 2.0: Unleashing Next-Level Precision in Cyber Risk Management

In cybersecurity, quantifying risk with precision is essential for robust security posture management. At Qualys, we continuously refine our methodologies to meet and exceed the evolving demands of vulnerability management and risk management. In October 2024, the launch of Qualys Enterprise...

The vulnerability of the libnv library in FreeBSD systems allows attackers to increase their privileges or cause service failures.

The vulnerability of the libnv library in FreeBSD systems is related to a potential overflow due to incorrect calculations of buffer size. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

CVE-2024-9333 Permission bypass in M-Files Connector for Copilot

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9333

CVE-2024-9333 involves M-Files Connector for Copilot prior to version 24.9.3 where an incorrect access control list calculation allows an authenticated user to bypass permissions and access a limited set of documents. The issue is tied to the access control mechanism in the connector, with impact...

CVE-2024-9333 Permission bypass in M-Files Connector for Copilot

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

CVE-2024-9333: Improper Preservation of Permissions

Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited amount of documents via incorrect access control list calculation...

The vulnerability of the PHP programming language’s password verification function lies in the insufficient calculation of the password hash, allowing attackers to compromise data integrity.

The vulnerability of the password verification function in the PHP programming language is related to insufficient calculation of the password hash. Exploiting this vulnerability allows attackers to compromise the integrity of data...

CVE-2024-9037

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-9037

CVE-2024-9037 affects Codezips Internal Marks Calculation 1.0. The vulnerability is an SQL injection in an unknown function of the file index.php triggered by manipulating the tid parameter, allowing remote execution of queries. Multiple sources (NVD, Red Hat, CVE list, and others) confirm a crit...

CVE-2024-9037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

PT-2024-39381

Name of the Vulnerable Software and Affected Versions Codezips Internal Marks Calculation version 1.0 Description A critical vulnerability has been found in the software, affecting an unknown function of the file index.php. The manipulation of the tid argument leads to SQL injection, allowing for...

Codezips Internal Marks Calculation SQL注入漏洞

Codezips Internal Marks Calculation is a Codezips open source student portal built with PHP. A SQL injection vulnerability exists in Codezips Internal Marks Calculation version 1.0, which stems from an SQL injection in the parameter tid...