PT-2024-9608 · Zabbi +2 · Zabbi +2

Name of the Vulnerable Software and Affected Versions: Zabbi affected versions not specified Description: A use after free error was discovered in the es browser get variant function, which can lead to a denial of service DoS when exploited. The issue is related to the use of memory after it has...

AZL-54642 CVE-2024-53100 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queuelock lock and destroy Commit 76d54bf20cdc "nvme-tcp: don't access released socket during error recovery" added a mutexlock call for the queue-queuelock in nvmetcpgetaddress. However, the mutexlo...

CVE-2024-50671

Incorrect access control in Adapt Learning Adapt Authoring Tool = 0.11.3 allows attackers with Authenticated User roles to obtain email addresses via the "Get users" feature. The vulnerability occurs due to a flaw in permission verification logic, where the wildcard character in permitted URLs...

PT-2024-34387 · Adapt Learning · Adapt Learning Adapt Authoring Tool

Name of the Vulnerable Software and Affected Versions: Adapt Learning Adapt Authoring Tool versions = 0.11.3 Description: The issue is related to incorrect access control, allowing attackers with Authenticated User roles to obtain email addresses via the "Get users" feature. This occurs due to a...

Tenda i9 安全漏洞

The Tenda i9 is a ceiling-mountable wireless access point from China's Tenda. A denial of service vulnerability exists in the Tenda i9 that stems from a null pointer dereference in the websReadEvent function of file /goform/GetIPTV. An attacker could exploit the vulnerability to cause a denial of...

Adapt Authoring Tool 安全漏洞

Adapt Authoring Tool is a free and easy-to-use eLearning authoring tool from Adapt Learning open source. A security vulnerability exists in Adapt Authoring Tool that stems from incorrect access control and allows an attacker with an authenticated user role to obtain an email address via the Get...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netns: Ensure that getnetns handles zero refcount nets properly. Syzkaller encountered a warning: refcountt: Addition on 0; use-after-free. WARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcountwarnsaturate+0xdf/0x1d0 Linked...

CVE-2023-24467 Possible Command Injection in OpenText iManager

Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000...

PT-2024-12037 · Opentext · Opentext Imanager

Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A possible XML External Entity Injection issue has been discovered in the iManager GET parameter. This could potentially allow for malicious activities. Recommendations: For OpenText iManager...

CVE-2024-11587

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52598

2FAuth 5.4.1 fixes a pair of issues: an SSRF vulnerability and a URI validation bypass in the POST /api/v1/twofaccounts/preview endpoint. An attacker can supply a remote URI; the app may perform a GET to that URL and, if the response appears as an image, store it on the server. The URI filter che...

SUSE CVE-2024-53044

In the Linux kernel, the following vulnerability has been resolved: net/sched: schapi: fix xainsert error path in tcfblockgetext This command: $ tc qdisc replace dev eth0 ingressblock 1 egressblock 1 clsact Error: block dev insert failed: -EBUSY. fails because user space requests the same block...

SUSE CVE-2024-53050

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2getcapability Add encoder check in intelhdcp2getcapability to avoid null pointer error...

SUSE CVE-2024-53086

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...

The vulnerability of the mvm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mvm component in the Linux operating system’s kernel is related to improper validation of input data in the iwlmvmgetsecflags function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-35410 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms versions prior to 2.3.2.240702 Description: The issue concerns a file upload vulnerability in the getFileName method located in /app/common/library/Upload.php. Recommendations: For versions prior to 2.3.2.240702, consider disabling the...

Exploit for Unrestricted Upload of File with Dangerous Type in Avaya Aura_Device_Services

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device S...

DEBIAN-CVE-2024-53085

In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread to be called while the operation is in progress. The recent bug report...

AZL-53951 CVE-2024-53050 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in hdcp2getcapability Add encoder check in intelhdcp2getcapability to avoid null pointer error...