6635 matches found
CVE-2024-5062
CVE-2024-5062 : A reflected XSS in zenml-io/zenml
CVE-2024-5062 Reflected XSS through survey redirect parameter in zenml-io/zenml
A reflected Cross-Site Scripting XSS vulnerability was identified in zenml-io/zenml version 0.57.1. The vulnerability exists due to improper neutralization of input during web page generation, specifically within the survey redirect parameter. This flaw allows an attacker to redirect users to a...
The vulnerability of the library for performing non-blocking I/O operations in XNIO, related to uncontrolled resource consumption, allows a attacker to cause a service failure.
The vulnerability of the library for handling non-blocking I/O operations in XNIO is related to uncontrolled resource consumption in NotifierState. Exploiting this vulnerability could allow a malicious actor to cause service failures...
SUSE CVE-2024-38355
Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. This issue is fixed by commit 15af22fc22 which has been included in...
GHSA-5VGJ-GGM4-FG62 pdoc embeds link to malicious CDN if math mode is enabled
Impact Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. Users who produce documentation with math mode should update immediately. All other users are unaffected. Patches This issue has been fixed...
DEBIAN-CVE-2024-39469
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfsemptydir misjudgment and long loop on I/O errors The error handling in nilfsemptydir when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or...
CVE-2024-38663
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 "blk-cgroup: Optimize blkcgrstatflush", each iostat instance is added to blkcg percpu list, so blkcgresetstats can't reset the stat instance by...
Malicious code in socket.io-client-v2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gltf-blender-io-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2424 Malicious code in gltf-blender-io-tests (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in delphire-io-portal (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2070 Malicious code in delphire-io-portal (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in act-rules.github.io (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @indrive.io/my-test-package (npm)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2024-38663
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 "blk-cgroup: Optimize blkcgrstatflush", each iostat instance is added to blkcg percpu list, so blkcgresetstats can't reset the stat instance by...
CVE-2024-38663
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 "blk-cgroup: Optimize blkcgrstatflush", each iostat instance is added to blkcg percpu list, so blkcgresetstats can't reset the stat instance by...
CVE-2024-38663
The CVE-2024-38663 issue is a Linux kernel vulnerability in blk-cgroup where a list may become corrupted during reset of I/O statistics. The root cause described is that, since commit 3b8cc6298724, each iostat instance is added to the blkcg per-cpu list; blkcg_reset_stats() attempted to reset the...
CVE-2024-38663 blk-cgroup: fix list corruption from resetting io stat
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from resetting io stat Since commit 3b8cc6298724 "blk-cgroup: Optimize blkcgrstatflush", each iostat instance is added to blkcg percpu list, so blkcgresetstats can't reset the stat instance by...
CLSA-2024-1718950178 Fix of 22 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-26764 - aio: remove an outdated BUGON and comment in aiocomplete - aio: remove the extra getfile/fput pair in iosubmitone - aio: refactor read/write iocb setup - fs/aio: Restrict kiocbsetcancelfn to I/O submitted via libaio CVE-url:...