AZL-52216 CVE-2024-51744 affecting package etcd for versions less than 3.5.18-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52275 CVE-2024-51744 affecting package kubernetes for versions less than 1.28.4-17

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52183 CVE-2024-51744 affecting package cert-manager for versions less than 1.12.15-1

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

UBUNTU-CVE-2024-51744

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

CVE-2024-38415

Memory corruption while handling session errors from firmware...

CVE-2024-38415 Use After Free in Computer Vision

Memory corruption while handling session errors from firmware...

CVE-2024-38415

CVE-2024-38415 corresponds to memory corruption during handling of firmware session errors in Qualcomm components (notably Qualcomm/Qualcomm Snapdragon Auto context appears in some feeds). The CVSS v3.1 metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW privileges required, no...

CVE-2024-38415 Use After Free in Computer Vision

Memory corruption while handling session errors from firmware...

PT-2024-27990 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption that occurs while handling session errors from firmware. This can potentially lead to exploitation. There is no information provid...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption while handling firmware session errors...

RHEL 7 : openstack-cinder (RHSA-2017:0156)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0156 advisory. OpenStack Block Storage cinder manages block storage mounting and the presentation of such mounted block storage to instances. The backend physical...

CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

DEBIAN-CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) relates to pointer arithmetic errors, which allow attackers to trigger service failures.

The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Squid proxy server, related to errors in processing input data, allows a hacker to cause a service failure.

The vulnerability of the Squid proxy server is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted ESI packets...

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers, related to memory release errors, allows an attacker to gain access to the kernel’s stack memory and dynamic memory.

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain access to kernel memory from the stack and dynamic memory...

The vulnerability of the password-changing function of the Cisco Firepower Management Center (FMC) software interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the password-changing function in the Cisco Firepower Management Center FMC software for network administration involves errors in handling requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20241031-01

A vulnerability in the nilfs2 component of the Linux operating system kernel is related to improper error handling in the nilfsgetblock function in fs/nilfs2/inode.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the nilfs2 component of...

ROS-20241031-02

A vulnerability in the qcom component of the Linux operating system kernel is related to read errors outside of bounds in the F function in drivers/clk/qcom/gcc-ipq9574.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the mm/memory-failu...