CVE-2024-26932

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpmportunregisterpd When unregister pd capabilitie in tcpm, KASAN will capture below double -free issue. The root cause is the same capabilitiy will be kfreed twice, the first time is...

UBUNTU-CVE-2024-27011

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix memleak in map from abort path The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result ...

Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

This Week in Spring - April 30th, 2024

Welcome to yet another amazing installment of This Week in Spring! As usual, we've got a ton of stuff to get into, so let's dive right into it! Chris Bono announces the new versions of Spring Functions Catalog and Spring Cloud Streams Applications In last week's installment of A Bootiful Podcast,...

PT-2024-40729 · Pcapng · Pcapng

Name of the Vulnerable Software and Affected Versions: pcapng affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::PcapNgFileReaderDevice::getNextPacket function, which is called by...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a possible poisoning of the link.next pointer...

This Week in Spring - Tuesday, April 23rd, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! We've had a really busy, wonderful week, as always, so let's dive right into it! We want you! ...to submit a talk to SpringOne 2024, in sunny Las Vegas! Hurry, the CFP closes May 3rd! Spring Shell 3.1.11, 3.2.4, and 3.3.0-m1...

PT-2024-40909 · Crates.Io · Zip Next

Name of the Vulnerable Software and Affected Versions: No vulnerable software versions are specified. Description: The issue concerns the zip next component, which will no longer receive updates or releases. Recommendations: At the moment, there is no information about a newer version that contai...

@flowes/editor-next (>=0.0.24, <=0.0.41), @hyperbook/element-excalidraw (>=0.6.0, <=0.6.1) +1 more potentially affected by CVE-2024-32472 via @excalidraw/excalidraw (0.16.1)

@excalidraw/excalidraw NPM version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on @excalidraw/excalidraw and may be impacted: - @flowes/editor-next =0.0.24, =0.6.0, =0.6.1 - @udecode/plate-excalidraw 31.1.0 Source cves: CVE-2024-32472 Source...

@flowes/editor-next (>=0.0.24, <=0.0.41), @hyperbook/element-excalidraw (>=0.6.0, <=0.6.1) +1 more potentially affected by CVE-2024-32472 via @excalidraw/excalidraw (0.16.1)

@excalidraw/excalidraw NPM version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on @excalidraw/excalidraw and may be impacted: - @flowes/editor-next =0.0.24, =0.6.0, =0.6.1 - @udecode/plate-excalidraw 31.1.0 Source cves: CVE-2024-32472 Source...

ALPINE-CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

DEBIAN-CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

CVE-2022-24809: NULL Pointer Dereference

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

SUSE CVE-2021-47207

In the Linux kernel, the following vulnerability has been resolved: ALSA: gus: fix null pointer dereference on pointer block The pointer block return from sndgf1dmanextblock could be null, so there is a potential null pointer dereference issue. Fix this by adding a null check before dereference...

Unspecified Vulnerability in Palo Alto Networks PAN-OS (CNVD-2024-20501)

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that can be exploited by an attacker to cause a predefined decryption exclusion to not function as expected...

Unspecified Vulnerability in Palo Alto Networks PAN-OS (CNVD-2024-20502)

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from the presence of a memory leak. No details of the vulnerability are provided at this time...

CVE-2024-30382

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to send a specific routing update, causing an rpd core due to memory corruption, leading to a Denial o...

next-group-hd.co.jp Cross Site Scripting vulnerability OBB-3914054

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...