CVE-2024-35863

CVE-2024-35863 : In the Linux kernel, a Use-After-Free (UAF) issue was fixed in the SMB client by guarding the is_valid_oplock_break path. The patch skips sessions that are tearing down (status == SES_EXITING) to avoid UAF, mitigating a local-vectored vulnerability in the SMB client code path. Th...

CVE-2024-35861

CVE-2024-35861: In the Linux kernel, smb client code (cifs) was fixed to address a potential use-after-free in cifs_signal_cifsd_for_reconnect(). The patch adds a skip for sessions that are tearing down (status == SES_EXITING) to avoid a UAF. The description indicates this fixes a use-after-free ...

CVE-2024-5098

SourceCodester Simple Inventory System 1.0 has a SQL injection vulnerability in login.php via the username parameter. The CVE-2024-5098 entry confirms an exploit has been disclosed. Several connected sources corroborate the issue and suggest updating to a newer version as the fix, and offer inter...

CVE-2024-5096

CVE-2024-5096 affects Hipcam Device up to 20240511 in the MAC Address Handler component, specifically the /log/wifi.mac file. The issue allows remote exploitation leading to information disclosure. The vulnerability is described consistently across multiple sources, and publicly disclosed exploit...

CVE-2024-28064

Kiteworks Totemomail versions 7.x and 8.x prior to 8.3.0 are vulnerable to a directory traversal flaw within the /responsiveUI/EnvelopeOpenServlet endpoint. The vulnerability specifically involves the messageId parameter and is triggered when using the displayLoginChunkedImages and storeLoginChun...

CVE-2024-36043

The SurveyJS Form Library is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.10.4 . The root cause is the insufficient sanitization of the imageLink property within the question_image.ts file. Specifically, an attacker can execute malicious scripts when the contentMode is set to y...

CVE-2024-31879

CVE-2024-31879 affects IBM i 7.2–7.4. The issue arises from deserialization of untrusted data in Management Central, allowing a remote attacker to execute arbitrary code and cause denial of service of network ports. Affected products and versions are IBM i 7.2, 7.3, and 7.4. Remediation is availa...

CVE-2024-3812

CVE-2024-3812 affects Salient Core for WordPress up to version 2.0.7, enabling Local File Inclusion via the nectar_icon shortcode (icon_linea attribute). Exploitation requires authenticated access at contributor level or higher, potentially allowing arbitrary PHP file execution and data access. P...

CVE-2024-4264

The CVE-2024-4264 entry affects berriai/litellm. The vulnerability is caused by unsafe use of eval in litellm.get_secret() when the server uses Google KMS, allowing untrusted data to be evaluated. Attackers can inject malicious values into environment variables via the /config/update endpoint, en...

CVE-2024-23556

CVE-2024-23556 concerns the HCL BigFix Platform and its SSL/TLS renegotiation feature, which can lead to a Denial of Service. Public sources confirm the issue stems from SSL/TLS renegotiation behavior that may exhaust resources or otherwise disrupt service availability. The primary vulnerability ...

CVE-2024-23583

CVE-2024-23583 affects HCL BigFix Platform, specifically the Windows Client Deploy Tool, with root cause described as insufficiently protected credentials. The vulnerability could allow an attacker to intercept credentials via Task Manager and gain unauthorized access to the Client Deploy Tool on...

CVE-2024-35313

The Tor Arti component, in versions prior to 1.2.3 , contains a vulnerability where circuits sometimes incorrectly report a length of 3 when using full vanguards (identified as TROVE-2024-004 ). This issue affects the way the Tor network constructs circuits. Documentation regarding the specific t...

CVE-2024-25742

The Linux kernel (versions before 6.9) is vulnerable to a security flaw where an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and trigger its handler. This vulnerability specifically affects AMD SEV-SNP and AMD SEV-ES environments. Exploitation of this flaw allo...

CVE-2024-5064

PHPGurukul Online Course Registration System 3.1 contains a SQL injection in the news-details.php file. The vulnerability is triggered by manipulating the nid parameter, enabling remote exploitation. Exploit details have been publicly disclosed. Affected component: news-details.php; vulnerability...

CVE-2024-3289

CVE-2024-3289 affects Nessus on Windows where installing to a non-default directory did not enforce secure permissions for sub-directories in versions prior to 10.7.3, enabling local privilege escalation for users who did not secure installation folders. The issue is local (attack vector: LOCAL) ...

CVE-2024-22429

CVE-2024-22429 affects Dell BIOS with an Improper Input Validation vulnerability. A locally authenticated user with admin privileges could exploit the flaw to achieve arbitrary code execution on the host, per the provided descriptions. The root cause is described as input validation errors within...

CVE-2024-35859

In the Linux kernel, the following vulnerability has been resolved: block: fix module reference leakage from bdevopenbydev error path At the time bdevmayopen is called, module reference is grabbed already, hence module reference should be released if bdevmayopen failed. This problem is found by...

CVE-2024-35849

CVE-2024-35849 affects the Linux kernel btrfs_ioctl_logical_to_ino path. The issue is an information leak: a struct btrfs_data_container allocated with kvmalloc() is copied back to user space without zero-filling, exposing uninitialized memory (Bytes 40-65535) to user-space. The root cause is lac...

CVE-2024-35846

CVE-2024-35846 affects the Linux kernel’s zswap shrinker under memcg-disabled (boot flag cgroup_disable=memory). A NULL memcg (sc->memcg == NULL) could cause a NULL dereference in memcg_page_state(), leading to a crash. The issue has been fixed in the kernel (as described in the connected docu...

CVE-2024-35845

The Linux kernel is vulnerable in the iwlwifi driver due to a lack of NUL termination in the iwl_fw_ini_debug_info_tlv string within the drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c component. This flaw, classified as an improper input validation issue, could allow an attacker to access confi...