11890 matches found
CVE-2024-44955
CVE-2024-44955 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2024-44955
Removed by vendor...
Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036
This module enables field collections to be displayed as tables. It supports display suite and field permissions and provides operations modify, delete, duplicate. This module has multiple vulnerabilities due to the requirements on the routes it provides not being restrictive enough. Information...
@blakeembrey/template vulnerable to code injection when attacker controls template input
Impact It is possible to inject and run code within the template if the attacker has access to write the template name. js const template = require'@blakeembrey/template'; template"Hello name!", "exploit && = console.log'success'; && function pwned"; Patches Upgrade to 1.2.0. Workarounds Don't pa...
GHSA-Q765-WM9J-66QJ @blakeembrey/template vulnerable to code injection when attacker controls template input
Impact It is possible to inject and run code within the template if the attacker has access to write the template name. js const template = require'@blakeembrey/template'; template"Hello name!", "exploit && = console.log'success'; && function pwned"; Patches Upgrade to 1.2.0. Workarounds Don't pa...
CVE-2024-45390
The CVE-2024-45390 entry concerns the @blakeembrey/template string template library. Prior to version 1.2.0, there is a vulnerability where an attacker who can write the template name can inject and run code within the template. A patch was included in version 1.2.0. Remediation guidance from the...
Mozilla Firefox和Mozilla Firefox ESR 输入验证错误漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A spoofing vulnerability exists in several Mozilla products, which stems...
PT-2024-31594 · Npm · @Blakeembrey/Template
Name of the Vulnerable Software and Affected Versions: @blakeembrey/template versions prior to 1.2.0 Description: The issue allows an attacker to inject and run code within the template if they have access to write the template name. This can be achieved by exploiting the template display name...
CVE-2024-33047 Buffer Over-read in Display
Memory corruption when the captureRead QDCM command is invoked from user-space...
CVE-2024-33047 Buffer Over-read in Display
Memory corruption when the captureRead QDCM command is invoked from user-space...
CVE-2024-33035 Integer Overflow or Wraparound in Display
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...
CVE-2024-33035 Integer Overflow or Wraparound in Display
Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an out-of-bounds read issue contained in the Display component...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an integer overflow issue contained in the Display component...
ASB-A-344620673
Bulletin has no description...
CVE-2024-43899
A NULL pointer dereference vulnerability was found in dcn20getdcccompressioncap function in the dcn20resource.c file in the AMD GPU driver in the Linux Kernel. This issue could allow an attacker to make the system hang when using the mpv media player with specific hardware acceleration options...
CVE-2024-43895
A vulnerability was found in the Linux kernel’s AMD display driver, which caused a NULL pointer dereference during the setup of Multi-Stream Transport MST and Display Stream Compression DSC. This issue occurred when the driver attempted to recompute DSC parameters without an active stream on the...
CVE-2024-43904
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing This commit adds null checks for the 'stream' and 'plane' variables in the dcn30applyidlepoweroptimizations function. These variables were previously...