CVE-2024-49573 sched/fair: Fix NEXT_BUDDY

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix NEXTBUDDY Adam reports that enabling NEXTBUDDY insta triggers a WARN in picknextentity. Moving clearbuddies up before the delayed dequeue bits ensures no -next buddy becomes delayed. Further ensure no new -next...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the NEXTBUDDY function of the scheduler may result in a warning...

CVE-2024-41787

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

CVE-2024-41787 IBM Engineering Requirements Management DOORS Next code execution

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

CVE-2024-41787 IBM Engineering Requirements Management DOORS Next code execution

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

Arista NG Firewall security vulnerabilities

Arista NG Firewall is a WEB firewall from Arista USA. A security vulnerability exists in Arista Edge Threat Management - Arista NG Firewall that originates from a user with advanced reporting application access rights can perform unauthorized actions...

Arista EOS security vulnerabilities

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from On affected platforms running Arista EOS, if some features are configured to redirect IP traffic to the next hop may bypa...

PT-2025-3683 · Arista · Arista Eos

Name of the Vulnerable Software and Affected Versions: Arista EOS versions prior to 4.32.1F Description: The issue affects Arista EOS platforms with features like policy-based routing PBR, BGP Flowspec, or interface traffic policy configured to redirect IP traffic to a next hop. Certain IP traffi...

IBM Engineering Requirements Management DOORS Next security vulnerabilities

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A security vulnerability exists in IBM Engineering Requirements Managemen...

CVE-2024-41787: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

Open Redirect

Overview sickchill is an Automatic Video Library Manager for TV Shows Affected versions of this package are vulnerable to Open Redirect due to improper validation of the next parameter in the login endpoint. An attacker can redirect users to arbitrary external URLs by manipulating the input to th...

PT-2025-3012

Name of the Vulnerable Software and Affected Versions SickChill versions prior to commit c7128a8946c3701df95c285810eb75b2de18bf82 Description The issue concerns an open redirect in the login endpoint of SickChill, an automatic video library manager for TV shows. A user-controlled login endpoint's...

SickChill has a vulnerability regarding input validation.

SickChill is an application in the SickChill open source. SickChill suffers from an input validation error vulnerability that stems from the next parameter in a user-controlled login endpoint that can receive arbitrary content, which can be exploited by an authenticated attacker to redirect the...

CVE-2024-46073

A reflected Cross-Site Scripting XSS vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability is due to improper sanitization of the "next" parameter, which is included in the application's response without adequate escaping. An attacker can exploit this flaw by tricking a...

PT-2025-2730

Name of the Vulnerable Software and Affected Versions: IceHRM version 32.4.0.OS Description: A reflected Cross-Site Scripting XSS issue exists in the login page due to improper sanitization of the next parameter, which is included in the application's response without adequate escaping. This allo...

PT-2025-5662 · Git +1 · Libvips

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, with a crash type of Heap-buffer-overflow READ 1. The crash state involves functions such as next...

CVE-2024-46073: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability is due to improper sanitization of the "next" parameter, which is included in the application's response without adequate escaping. An attacker can exploit this flaw by tricking a...

PT-2025-9001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential wild pointer dereferences issue exists in the Linux kernel regarding the APIs class dev iter init, class dev iter next, and class dev iter exit. The issue arises when the cla...

1ocalendar (1.0.0), 24social-ui (>=1.0.0, <=1.0.5) +2608 more potentially affected by CVE-2024-56332 via next (>=13.0.0, <=13.5.7-canary.37)

next NPM version =13.0.0, =1.0.0, =1.0.51, =1.6.1, =0.5.5, =0.1.23, =2.0.0-rc19, =0.2.47, =0.4.37, =1.3.2, =0.0.2, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2024-56332 Source advisory: OSV:GHSA-7M27-7GHC-44W9...

@abuaiman/abujunainah (1.1.4), @abuaiman/spy (1.1.4) +254 more potentially affected by CVE-2024-56332 via next (>=15.0.0, <=15.1.1)

next NPM version =15.0.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =1.0.19, =0.1.0, =0.0.4, =0.1.0, =0.1.11, =1.0.0, =0.0.1-alpha, =0.0.4-alpha - @benimaru/ahgas 1.1.4 - @benimaru/asduq 1.1.4 - @benimaru/balon 1.1.4 and more Source cves: CVE-2024-56332 Source advisory...