CVE-2024-46862 ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item There is no linksnum in struct sndsocacpimach , and we test !link-numadr as a condition to end the loop in hdasdwmachineselect. So an empty item in struct...

PT-2024-32256 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ASoC: Intel: soc-acpi-intel-mtl-match component in the Linux kernel. There is no links num in the struct snd soc acpi mach and the code tests !link-num adr ...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

CVE-2006-2643

CVE-2006-2643 is an XSS vulnerability in Monster Top List (MTL) 1.4, exposed via the user_error_message parameter in index.php. The available documents confirm the affected software (MTL 1.4) and the vulnerable entry point (index.php), but do not provide additional technical details such as concr...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...