CVE-2021-47365 afs: Fix page leak

In the Linux kernel, the following vulnerability has been resolved: afs: Fix page leak There's a loop in afsextendwriteback that adds extra pages to a write we want to make to improve the efficiency of the writeback by making it larger. This loop stops, however, if we hit a page we can't write ba...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 6 (6.0.1-95)

This update provides a stability improvement. Vulnerability id: VSTOR-85582 Fixed an issue with ploop overflow that may lead to corruption of images larger than 2 TB...

SUSE-SU-2024:1703-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: PostgreSQL upgrade to version 14.12 bsc1224051: - CVE-2024-4317: Fixed visibility restriction of pgstatsext and pgstatsextexprs entries to the table owner bsc1224038. Bug fixes: - Fix incompatibility with LLVM 18. - Prepare for PostgreSQL 1...

CVE-2024-35874

In the Linux kernel, the following vulnerability has been resolved: aio: Fix null ptr deref in aiocomplete wakeup listdelinitcareful needs to be the last access to the wait queue entry - it effectively unlocks access. Previously, finishwait would see the empty list head and skip taking the lock,...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843

The CVE-2024-21843 entry concerns Intel® Computing Improvement Program software with an uncontrolled search path vulnerability prior to version 2.4.0.10654 that could allow a locally authenticated user to escalate privileges. Affected product: Intel® Computing Improvement Program (before 2.4.0.10...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-19087 · Intel · Intel Computing Improvement Program

Name of the Vulnerable Software and Affected Versions: IntelR Computing Improvement Program software versions prior to 2.4.0.10654 Description: The issue is related to an uncontrolled search path in some IntelR Computing Improvement Program software, which may allow an authenticated user to...

Intel Computing Improvement Program 安全漏洞

Intel Computing Improvement Program is a software improvement program application from Intel Corporation USA. The program is used to collect computer feature usage information, component usage information, operating system information, and more. A security vulnerability previously existed in Inte...

Laravel Hijacked authentication cookies vulnerability

Laravel 4.1.26 introduces security improvements for "remember me" cookies. Before this update, if a remember cookie was hijacked by another malicious user, the cookie would remain valid for a long period of time, even after the true owner of the account reset their password, logged out, etc. This...

GHSA-Q4XF-7FW5-4X8V Laravel Hijacked authentication cookies vulnerability

Laravel 4.1.26 introduces security improvements for "remember me" cookies. Before this update, if a remember cookie was hijacked by another malicious user, the cookie would remain valid for a long period of time, even after the true owner of the account reset their password, logged out, etc. This...

GHSA-337W-FXPQ-5M34 Drupal core uses a vulnerable Third-party library CKEditor

The Drupal project uses the third-party library CKEditor, which has released a security improvement that is needed to protect some Drupal configurations. Vulnerabilities are possible if Drupal is configured to use the WYSIWYG CKEditor for your site's users. An attacker that can create or edit...

GHSA-M9FV-WHQ2-6WMC Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

The Drupal project uses the third-party library ArchiveTar, which has released a security improvement that is needed to protect some Drupal configurations. Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them. The lates...

Drupal core uses a vulnerable Third-party library CKEditor

The Drupal project uses the third-party library CKEditor, which has released a security improvement that is needed to protect some Drupal configurations. Vulnerabilities are possible if Drupal is configured to use the WYSIWYG CKEditor for your site's users. An attacker that can create or edit...

GHSA-98H9-727M-44QV Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

The Drupal project uses the third-party library ArchiveTar, which has released a security improvement that is needed to protect some Drupal configurations. Multiple vulnerabilities are possible if Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads and processes them. The lates...

CVE-2024-27829

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary code execution...

CVE-2024-27810

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to read sensitive location information...

Intel® Computing Improvement Program Software Advisory

Summary: A potential security vulnerability in some Intel® Computing Improvement Program software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21843 Description: Uncontrolled search path for...

CVE-2024-27827

CVE-2024-27827 affects macOS Sonoma 14.5 focusing on the Finder component. The issue allows an app with local access to read arbitrary files, and Apple states it was addressed through improved state management and fixed in macOS Sonoma 14.5. The public documentation does not provide additional te...