Lucene search
K

322 matches found

UbuntuCve
UbuntuCve
added 2024/03/26 6:15 p.m.20 views

CVE-2024-26647

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

5.5CVSS6.1AI score0.00224EPSS
Exploits0References13
OSV
OSV
added 2024/03/26 6:15 p.m.1 views

UBUNTU-CVE-2024-26647

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

5.5CVSS6AI score0.00224EPSS
Exploits0References14
CVE
CVE
added 2024/03/26 5:50 p.m.116 views

CVE-2024-26647

CVE-2024-26647 affects the Linux kernel DRM/AMD display component. In link_set_dsc_pps_packet(), a dereference of struct display_stream_compressor *dsc could occur (dsc->ctx->logger) before a NULL pointer check, enabling a potential crash when the dsc pointer is NULL. The issue has been fix...

5.5CVSS6.4AI score0.00224EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/03/26 5:50 p.m.4 views

CVE-2024-26647 drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix late derefrence 'dsc' check in 'linksetdscppspacket' In linksetdscppspacket, 'struct displaystreamcompressor dsc' was dereferenced in a DCLOGGERINITdsc-ctx-logger; before the 'dsc' NULL pointer check. Fixes t...

5.5CVSS5.6AI score0.00224EPSS
Exploits0References6
WPVulnDB
WPVulnDB
added 2024/01/17 12:0 a.m.23 views

Image Compressor & Optimizer - iLoveIMG < 1.0.6 - Admin+ PHP Object Injection

Description The plugin is vulnerable to PHP Object Injection in all versions up to 1.0.6 exclusive via deserialization of untrusted input. This makes it possible for authenticated attackers, with admin access or higher to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a...

7.4AI score
Exploits0References1Affected Software1
OSV
OSV
added 2024/01/04 1:15 a.m.1 views

CVE-2024-20805

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file...

5.5CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.2 views

SAMSUNG mobile devices path traversal vulnerability

SAMSUNG mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A path traversal vulnerability exists in SAMSUNG mobile devices SMR Jan-2024 Release 1 version and earlier versions, which stems from a path traversal...

5.5CVSS6.8AI score0.00181EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/04 12:0 a.m.2 views

PT-2024-18711 · Google +1 · Android 11 +3

Name of the Vulnerable Software and Affected Versions: MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12 MyFiles version 14.5.00.21 in Android 13 Description: A path traversal vulnerability in the ZipCompressor of MyFiles allows local attackers to write arbitrary files...

5.5CVSS7.1AI score0.00181EPSS
Exploits0References5
OSV
OSV
added 2023/12/30 2:24 p.m.5 views

OPENSUSE-SU-2023:0424-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

9.3CVSS9.3AI score0.01054EPSS
Exploits1References3
OSV
OSV
added 2023/12/30 2:24 p.m.9 views

OPENSUSE-SU-2023:0423-1 Security update for deepin-compressor

This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal boo1218428...

9.3CVSS9.3AI score0.01054EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/12/30 12:0 a.m.23 views

openSUSE 15 Security Update : deepin-compressor (openSUSE-SU-2023:0424-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0424-1 advisory. - Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that...

9.3CVSS7.4AI score0.01054EPSS
Exploits1References4
OPENSUSE Linux
OPENSUSE Linux
added 2023/12/30 12:0 a.m.7 views

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0424-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now available. Description: Thi...

9.3CVSS7.2AI score0.01054EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/12/30 12:0 a.m.25 views

openSUSE 15 Security Update : deepin-compressor (openSUSE-SU-2023:0423-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0423-1 advisory. - Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that...

9.3CVSS7.4AI score0.01054EPSS
Exploits1References4
OPENSUSE Linux
OPENSUSE Linux
added 2023/12/30 12:0 a.m.6 views

Security update for deepin-compressor (moderate)

openSUSE Security Update: Security update for deepin-compressor Announcement ID: openSUSE-SU-2023:0423-1 Rating: moderate References: 1218428 Cross-References: CVE-2023-50255 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: Thi...

9.3CVSS7.2AI score0.01054EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/12/29 2:22 a.m.1 views

SUSE CVE-2023-50255

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version...

7.8CVSS7.1AI score0.01054EPSS
Exploits1References5
NVD
NVD
added 2023/12/27 5:15 p.m.15 views

CVE-2023-50255

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version...

9.3CVSS0.01054EPSS
Exploits1References2
Prion
Prion
added 2023/12/27 5:15 p.m.17 views

Path traversal

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version...

4.4CVSS7.3AI score0.01054EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/12/27 4:16 p.m.23 views

CVE-2023-50255 Zip Path Traversal in Deepin-Compressor

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version...

9.3CVSS9.6AI score0.01054EPSS
Exploits1References2
CVE
CVE
added 2023/12/27 4:16 p.m.41 views

CVE-2023-50255

CVE-2023-50255 affects the Deepin-Compressor default archive manager in Deepin Linux. A path traversal flaw prior to 5.12.21 can be exploited to achieve Remote Command Execution when opening crafted archives. Remediation: upgrade to version 5.12.21 or later (as listed in OpenSUSE/OpenSUSE-SU advi...

9.3CVSS8.6AI score0.01054EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2023/12/27 12:0 a.m.2 views

Deepin-Compressor Security Vulnerability

Deepin-Compressor is a software tool that provides common functions for decompressing and compressing files. A security vulnerability exists in Deepin-Compressor versions prior to 5.12.21, which stems from a path traversal vulnerability in Deepin Compressor. The vulnerability can be exploited to...

9.3CVSS7.2AI score0.01054EPSS
Exploits1References3
Rows per page
Query Builder