3058 matches found
CVE-2024-37365
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...
kernel: powerpc/64s: fix program check interrupt emergency stack path
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...
CVE-2024-37365: Improper Input Validation
A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...
Rockwell Automation FactoryTalk View ME 安全漏洞
Rockwell Automation FactoryTalk View ME is a human-machine interface HMI software from Rockwell Automation, Inc. that is used to create and deploy monitoring and control interfaces that run on plant equipment and machines. A security vulnerability exists in Rockwell Automation FactoryTalk View ME...
ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
...
WS-2022-0126
array-macro before 2.1.2 did substitute the array length provided by a user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized types,...
WS-2022-0085
Versions before 2.0.2 of the crate 'enum-map' did not properly check the length of an enum when using enummap! macro, trusting user-provided length. Fixed in version 2.0.2. When the LENGTH in the Enum trait does not match the array length in the EnumArray trait, this can result in the...
WS-2022-0463
cell-project used incorrect variance when projecting through &Cell. The issue lies in the implementation of the cellproject macro which used field as const instead of field as mut . The problem being that const T is covariant in T while mut T is invariant in T. Keep in mind that &Cell is invarian...
WS-2020-0445
Affected versions of array-macro crate called some methods using auto-ref. The flaw was corrected by explicitly referencing variables in macro body in order to avoid auto-ref. Versions 1.0.2 are not affected. 1.0.5 fixes the issue...
foreman: Read-only access to entire DB from templates
A vulnerability was found in Foreman's loader macros introduced with report templates. These macros may allow an authenticated user with permissions to view and create templates to read any field from Foreman's database. By using specific strings in the loader macros, users can bypass permissions...
CVE-2024-50072
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...
CVE-2024-50072
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect use of BUGON in the IBI DMA settings instead of exiting when the condition is not met...
Updated libreoffice package fixes security vulnerability
The Certificate Validation user interface in LibreOffice allows a potential vulnerability. Signed macros are scripts that have been digitally signed by the developer using a cryptographic signature. When a document with a signed macro is opened a warning is displayed by LibreOffice before the mac...
Oracle Linux 9 : libreoffice (ELSA-2024-5583)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5583 advisory. 7.1.8.1-14.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Added the --with-hamcrest option to configure. 7.1.8.1 - Remove Red Hat branding - Change...
get-size-derive is unmaintained
get-size-derive's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo. get-size-derive also depends on attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error. Possible Alternatives - get-size-deri...
PT-2024-40968
Name of the Vulnerable Software and Affected Versions get-size affected versions not specified Description The maintainer of get-size seems to be unreachable, with no commits or releases for 1 year and no activity on the GitHub repository. get-size depends on get-size-derive 0.1.3, which uses...
PT-2024-40970
Name of the Vulnerable Software and Affected Versions get-size-derive affected versions not specified Description The maintainer of get-size-derive seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repository. Additionally, get-size-derive depen...
Cross Site Scripting(XSS)
damienharper/auditor-bundle is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to failing to properly escape the %sourcelabel% in the Twig macro, allowing malicious script tags to be injected and executed within the application...