Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS

Summary Easy!Appointments allows administrators to define a custom "booking disabled" message through the booking settings page. That value is stored in the disablebookingmessage setting via a rich-text editor and later passed directly to the public bookingmessage view without escaping or...

DEBIAN-CVE-2024-53094

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpageok check to disable MSGSPLICEPAGES While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter indicating that a slab page is being used in sendpage. To address this, it is...

CVE-2024-35906

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

PT-2024-26776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue was related to the drm/amd/display component, where a previous patch to allow DTBCLK disable did not address boot issue...

Astra Safepolicy Access Control Data Compromise

The vulnerability of the astra-safepolicy security configuration software relates to the disabling of the MAC mode. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...