CVE-2024-37622

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the num parameter at /flow/flow.php...

RockOA Cross-Site Scripting Vulnerability

RockOA Xinhu is an open source office OA system. A cross-site scripting vulnerability exists in Xinhu RockOA v2.6.3, which originates from a cross-site scripting vulnerability in the num parameter on /flow/flow.php...

CVE-2024-37622

Xinhu RockOA v2.6.3 has a reflected XSS vulnerability in the num parameter of /flow/flow.php. The issue is confirmed across multiple sources: Xinhu RockOA v2.6.3, with potential impact to users via an attacker-supplied input reflected in the page. Remediation guidance found in PT-2024-27679 recom...

CVE-2024-37622

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the num parameter at /flow/flow.php...

SUSE CVE-2021-47444

In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...

DEBIAN-CVE-2021-47444

In the Linux kernel, the following vulnerability has been resolved: drm/edid: In connectorbadedid cap numofext by numblocks read In commit e11f5bd8228f "drm: Add support for DP 1.4 Compliance edid corruption test" the function connectorbadedid started assuming that the memory for the EDID passed ...

UBUNTU-CVE-2023-52827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12khttpullppdustats len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read i...

DEBIAN-CVE-2024-35911

In the Linux kernel, the following vulnerability has been resolved: ice: fix memory corruption bug with suspend and rebuild The ice driver would previously panic after suspend. This is caused from the driver only calling the icevsifreeqvectors function by itself, when it is suspending. Since comm...

UBUNTU-CVE-2024-35911

In the Linux kernel, the following vulnerability has been resolved: ice: fix memory corruption bug with suspend and rebuild The ice driver would previously panic after suspend. This is caused from the driver only calling the icevsifreeqvectors function by itself, when it is suspending. Since comm...

PT-2024-28504 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, where the -num initialization is moved to before the first access of -hws to clear up a warning. This warning occurs because the counted by...

CVE-2024-23032

Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2024-23032

Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

PT-2024-19640 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.5 Description: The issue is related to a Cross Site Scripting vulnerability in the num parameter, allowing a remote attacker to run arbitrary code via a crafted URL. Recommendations: For eyoucms version 1.6.5, consider...

SUSE CVE-2023-38653

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

UBUNTU-CVE-2023-38650

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

Malicious code in fibo-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69de88aac3d36d27f45dcf96193e35f6431e34fb681103b540430fda434bd659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8627 Malicious code in fibo-num (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69de88aac3d36d27f45dcf96193e35f6431e34fb681103b540430fda434bd659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Libde265 Security Vulnerability

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.12, which originates from the inclusion of multiple buffer overflows via the numtilecolumns and numtilerow parameters in the picparameterset::dump function...

Multiple soundness issues in lexical

lexical contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls MaybeUninit::assumeinit ...

GHSA-C2HM-MJXV-89R4 Multiple soundness issues in lexical

lexical contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls MaybeUninit::assumeinit ...