PT-2024-39616

Name of the Vulnerable Software and Affected Versions OFCMS version 1.1.2 Description A problematic vulnerability has been found in OFCMS, affecting the add function of the file "/admin/system/dict/add.json?sqlid=system.dict.save". The manipulation of the dict value argument leads to cross-site...

PT-2024-7792

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131 Firefox Focus for Android versions prior to 131 Description A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing...

PT-2024-31903 · Unknown · Scriptcase

Name of the Vulnerable Software and Affected Versions: Scriptcase versions 9.10.023 and earlier Description: The issue allows an authenticated user to craft malicious payloads using the messages feature, enabling the injection of malicious code into any user's account on the platform. Regular use...

PT-2024-31942 · Cute Png · Cute Png

Name of the Vulnerable Software and Affected Versions: cute png version 1.05 Description: A heap buffer overflow issue was discovered in the cp stored function at cute png.h. This issue can be exploited via the cp stored function. Recommendations: For cute png version 1.05, consider disabling the...

PT-2024-31938 · Cute Png · Cute Png

Name of the Vulnerable Software and Affected Versions: cute png version 1.05 Description: The issue is related to a stack overflow in the cp dynamic function located at cute png.h. Recommendations: For cute png version 1.05, consider disabling the cp dynamic function as a temporary workaround unt...

PT-2024-18905 · Uplot · Uplot

Name of the Vulnerable Software and Affected Versions: uplot versions prior to 1.6.31 Description: The issue is related to Prototype Pollution via the uplot.assign function due to a missing check if the attribute resolves to the object prototype. This allows for potential manipulation of the...

PT-2024-9598 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0 v15.11.0.20 Description: The issue is related to the formSetUSBPartitionUmount function of the Tenda G3 wireless access point's firmware, which fails to neutralize special elements when processing the usbPartitionName...

PT-2024-31945 · Pix Link · Pix-Link Lv-Wr22

Name of the Vulnerable Software and Affected Versions: PIX-LINK LV-WR22 version RE3002-P1-01 V117.0 Description: The issue concerns Improper Access Control, where the TELNET service is enabled with weak credentials for a root-level account, and these credentials cannot be changed. Recommendations...

PT-2024-9599 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0 v15.11.0.20 Description: The issue is related to the formSetDebugCfg function in the Tenda G3 wireless access point firmware, which is associated with incorrect filtering of the enable, level, and module parameter values...

PT-2024-31848 · Solvait · Solvait

Name of the Vulnerable Software and Affected Versions: Solvait version 24.4.2 Description: A Stored Cross-Site Scripting XSS vulnerability allows remote attackers to inject malicious scripts into the application due to insufficient input validation and sanitization in the "Intrest" feature...

SUSE CVE-2024-46820

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively get...

SUSE CVE-2024-46846

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtime PM / system PM handling Commit e882575efc77 "spi: rockchip: Suspend and resume the bus during NOIRQSYSTEMSLEEPPM ops" stopped respecting runtime PM status and simply disabled clocks...

OPENSUSE-SU-2024:0319-1 Security update for coredns

This update for coredns fixes the following issues: Update to version 1.11.3: optimize the performance for high qps 6767 bump deps Fix zone parser error handling 6680 Add alternate option to forward plugin 6681 fix: plugin/file: return error when parsing the file fails 6699 fix:documentation...

AZL-49821 CVE-2024-46860 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921ipv6addrchange When disabling wifi mt7921ipv6addrchange is called as a notifier. At this point mvif-phy is already NULL so we cannot use it here...

DEBIAN-CVE-2024-46846

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtime PM / system PM handling Commit e882575efc77 "spi: rockchip: Suspend and resume the bus during NOIRQSYSTEMSLEEPPM ops" stopped respecting runtime PM status and simply disabled clocks...

DEBIAN-CVE-2024-46820

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: remove irq disabling in vcn 5 suspend We do not directly enable/disable VCN IRQ in vcn 5.0.0. And we do not handle the IRQ state as well. So the calls to disable IRQ and set state are removed. This effectively get...

UBUNTU-CVE-2024-46846

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtime PM / system PM handling Commit e882575efc77 "spi: rockchip: Suspend and resume the bus during NOIRQSYSTEMSLEEPPM ops" stopped respecting runtime PM status and simply disabled clocks...

PT-2024-31298 · Nasa · Nasa Cryptolib

Name of the Vulnerable Software and Affected Versions: NASA CryptoLib version 1.3.0 Description: The issue is related to an Out-of-Bounds read via the TC subsystem. Specifically, the problem is identified in the crypto aos.c file. Recommendations: For NASA CryptoLib version 1.3.0, consider...

PT-2024-25216 · Unknown · Plasmoapp Rpshare Fabric Mod

Name of the Vulnerable Software and Affected Versions: Plasmoapp RPShare Fabric mod version 1.0.0 Description: The issue allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptScreen. Recommendations: For Plasmoapp RPShare Fabric mod version 1.0.0, consider...

PT-2024-39548 · Unknown · Skyselang Yyladmin

Name of the Vulnerable Software and Affected Versions: skyselang yylAdmin versions up to 3.0 Description: A critical issue was found in the Backend component, specifically in the function list of the file /app/admin/controller/file/File.php. The manipulation of the is disable argument leads to SQ...