6265 matches found
DEBIAN-CVE-2024-6564
Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...
UBUNTU-CVE-2024-6564
Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...
kernel: can: peak_pci: peak_pci_remove(): fix UAF
In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' later. The following log reveals it: 35.961814 BUG: KASAN:...
PT-2024-37720 · Renesas +1 · R-Car Gen3 +1
Name of the Vulnerable Software and Affected Versions: Renesas R-Car Gen3 versions affected versions not specified Description: The issue is caused by a buffer overflow in the rcar dev init function due to the use of untrusted data rcar image number as a loop counter before verifying it against...
PT-2024-30680
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the Advanced Sound Architecture ASoC component in the Linux kernel, specifically with the acpi get first physical node function, which can return NULL under certain...
CVE-2024-36113
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113 Discourse missing authorization checks for suspending admins/moderators
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
CVE-2024-36113 Discourse missing authorization checks for suspending admins/moderators
Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch, version 3.3.0.beta3 on the beta branch, and version 3.3.0.beta4-dev on the tests-passed branch, a rogue staff user could suspend other staff users preventing them from logging in to the site. The issue i...
Debian: Security Advisory (DSA-5717-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2024-37598 · Tenda · Tenda A301
Name of the Vulnerable Software and Affected Versions: Tenda A301 version 15.13.08.12 Description: A critical issue was found in the function fromSetWirelessRepeat of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to a stack-based buffer overflow. This issue can...
Exploit for Out-of-bounds Write in Mozilla Firefox
CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer R...
Denial Of Service (DoS)
silverstripe/framework is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient authentication controls in the dev/build system controller, which could allow unauthorized users to trigger the dev/build process and potentially causing resource exhaustion and disrupting...
Information Disclosure
silverstripe/framework is vulnerable to Information Disclosure. The vulnerability is due to sensitive database connection details potentially being exposed in stack traces when running in dev mode with the mysqli database driver...
MAL-2024-3833 Malicious code in vscode-dev-containers (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rippling-flux-dev-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2963 Malicious code in rippling-flux-dev-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rippling-flux-dev (npm)
--- -= Per source details. Do not edit below this line.=-...