Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from the use of WARN when coding fails, resulting in a crash...

GHSA-3J4H-H3FP-VWWW LNbits improperly handles potential network and payment failures when using Eclair backend

Summary Paying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. Details Using blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

Using AI for Political Polling

Public polling is a critical function of modern political campaigns and movements, but it isnt what it once was. Recent US election cycles have produced copious postmortems explaining both the successes and the flaws of public polling. There are two main reasons polling fails. First, nonresponse...

Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

GHSA-M96R-7VQM-J95G Typo3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

PT-2024-40366

Name of the Vulnerable Software and Affected Versions OSV affected versions not specified Description A security issue has been found where login failures are logged on the default stream with log level "warning", including plain-text user credentials. Recommendations At the moment, there is no...

Information Disclosure

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the "warning" level instead of the "debug" level, which exposes plain text credential information...

ng-srcset Component DoS

The vulnerability of the ng-srcset component in the application design and development environment for Angular is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

PT-2024-26913 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.11.2 Description: Directus is a real-time API and App dashboard for managing SQL database content. Providing a non-numeric length value to the random string generation utility will create a memory issue, breaking...

NVIDIA GPU Display Driver Code Execution

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the assignment of a zero pointer. Exploiting this vulnerability allows an attacker to cause system failures and disclose sensitive information...

ruby:3.0 security update

ruby 3.0.7-143 - Fix Zlib test failures on s390x due to HW acceleration Related: RHEL-36189 3.0.7-142 - Upgrade to Ruby 3.0.7. Resolves: RHEL-36189 - Fix HTTP response splitting in CGI. Resolves: RHEL-36193 - Fix ReDoS vulnerability in URI. Resolves: RHEL-36196 - Fix ReDoS vulnerability in Time...

GHSA-WJ85-RG5G-V8JM TYPO3 Information Disclosure in User Authentication

It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials...

AZL-67991 CVE-2024-36909 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail such that an error is returned and the resultin...

Eclipse Mosquitto CONNECT DoS

The vulnerability of the CONNECT component of the Eclipse Mosquitto messaging broker is related to the allocation of memory based on an unreliable large value. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2024-40500 · Osv · Osv

Name of the Vulnerable Software and Affected Versions: OSV affected versions not specified Description: A security issue has been found where login failures are logged on the default stream with log level "warning", including plain-text user credentials. Recommendations: At the moment, there is n...

NVIDIA GPU Display Driver Code Execution

The vulnerability of the NVIDIA GPU Display Driver for Windows software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

NVIDIA GPU Display Driver Disclosure System Failure

The vulnerability of the NVIDIA GPU Display Driver for Linux software lies in errors related to privilege management. Exploiting this vulnerability can allow attackers to disclose sensitive information and cause service failures...

Siemens network software Memory Walking DoS

The vulnerability of Siemens network software is related to reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to trigger a Basic Kernel Failure BSOD in Windows systems...

Linux mvpp2 Network Driver DoS

The vulnerability in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the MVPP2 network driver on the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Jenkins Report Info Plugin Path Traversal vulnerability

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files. Additionally, Report Info Plugin does not support distributed builds. This results in a path traversal vulnerability, allowing attackers with Item/Configure permissio...