CVE-2024-2045

The CVE-2024-2045 entry concerns Session version 1.17.5. Affected component: Local File Read via chat attachments, enabling retrieval of internal application files and public files from a user’s device without consent. This is a Local attack (LOCAL) requiring user interaction. Descriptions from m...

CVE-2024-0403

CVE-2024-0403 affects Recipes version 1.5.10, where the server allows arbitrary HTTP requests due to a Server-Side Request Forgery (SSRF) vulnerability. The issue enables the server to be used to contact external resources (e.g., “arbitrary HTTP requests”) and is cataloged with a CVSSv3.1 base sc...

CVE-2024-2021

CVE-2024-2021 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is a SQL injection in an unknown function of /admin/list_localuser.php, triggered by manipulating the ResId parameter. It is exploitable remotely and has been disclosed publicly. Multiple connected sources ...

Design/Logic Flaw

In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during spiunregistercontroller, as the list is already torn down at the time we perform devresfind for devmspireleasecontroller. This caus...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: m68k: mvme147,mvme16x: Don't wipe PCC timer config bits Don't clear the timer 1 configuration bits when clearing the interrupt flag and counter overflow. As Michael reported, "This results in no timer interrupts being delivered...

CVE-2024-27294

CVE-2024-27294 concerns the Go/Puppet toolchain issue for the dp-golang module. Affected: dp-golang prior to 1.2.7, used with Puppet running as root on macOS (Go versions 1.4.3–1.21rc3; specific bootstrap tarballs). Root cause: files within the Go installation could be created with incorrect owne...

CVE-2021-47068

The CVE-2021-47068 entry concerns the Linux kernel NFC LLCP paths (llcp_sock_bind/llcp_sock_connect). Root cause: a refcount leak in bind/connect was fixed but introduced a use-after-free when the same local is bound to two sockets. The vulnerability is tied to the NFC LLCP implementation in the ...

CVE-2021-47065

CVE-2021-47065: Technical details (affected product/versions, impact, fix) are not provided in the supplied documents. Monitor official updates for the vulnerability specifics and patch availability.

CVE-2021-47066

CVE-2021-47066 is a Linux kernel issue where async_xor parity calculation failed when sharing pages with different offsets, causing potential data corruption. The root cause was that the calc of xor value used only src_list while the source page offsets (src_offs) were needed when dropping destin...

CVE-2021-47064

CVE-2021-47064 concerns the Linux kernel mt76 wireless driver. The issue arises in the mt76_dma_tx_queue_skb_raw path where buf can be uninitialized, causing the field skip_unmap to inherit a non-zero value from stack garbage. As a result, DMA mappings for MCU command frames may not be unmapped a...

CVE-2021-47062

The CVE-2021-47062 vulnerability affects the Linux kernel KVM SVM path. The issue occurs when iterating vCPUs for SEV-encrypted VMSAs using created_vcpus, which does not guarantee a vCPU’s existence and can trigger a NULL pointer dereference. The documented fix switches to iterating with online_v...

CVE-2021-47061

CVE-2021-47061 : Concrete details in connected advisories show a Linux kernel/KVM issue where destroying an I/O bus device must occur after unregister, and after SRCU-synchronization. The root cause is a use-after-free risk if devices are destroyed before the bus is nullified, because readers exp...

CVE-2021-47060

CVE-2021-47060 affects the Linux kernel KVM subsystem. The issue arises when unregistering an I/O bus with kvm_io_bus_unregister_dev() fails to allocate memory for a new bus instance, causing unregister_dev() to destroy all devices on the bus except the target device without signaling the caller....

CVE-2021-47058

CVE-2021-47058 is a Linux kernel vulnerability affecting the regmap debugfs path. The issue arises from a memory leak in which debugfs_name is freed in regmap_debugfs_exit() but not recreated due to a conditional added by upstream commit cffa4b2122f5. The relevant sequence involves regmap_reinit_...

CVE-2021-47055

CVE-2021-47055 affects the Linux kernel MTD subsystem. The root cause is that MEMLOCK, MEMUNLOCK, and OTPLOCK modify protection bits and thus require write permission; MEMLOCK/MEMUNLOCK may be write-only on some hardware (e.g., SPI-NOR with WP# tied to GND) and OTPLOCK is always write-once. MEMSE...

CVE-2021-47020

CVE-2021-47020 is a Linux kernel vulnerability in the SoundWire subsystem. The issue is a memory leak in the stream config error path for soundwire: stream: when stream config fails, the master runtime releases slave_runtimes from the slave_rt_list but the slave runtime is not added to that list ...

CVE-2021-46959

CVE-2021-46959 is a Linux kernel SPI subsystem use-after-free issue (devm_spi_alloc_{master,slave}) caused by relying on the devres list during spi_unregister_controller. The root cause is that devres_find() runs after the devres list has been torn down, leading to underflow of reference counters...

CVE-2024-27292

Docassemble (1.4.53–1.4.96) is affected by CVE-2024-27292: an unauthenticated information disclosure via URL manipulation in the interview endpoint. The issue enables reading arbitrary server information; patch is available in version 1.4.97 of the master branch. The vulnerability has CVSS 3.1 ba...

CVE-2024-27291

CVE-2024-27291 concerns Docassemble, an expert system for guided interviews and document assembly. The issue is an open redirect vulnerability: before version 1.4.97, a crafted URL can cause a user to be redirected to an arbitrary site due to improper URL handling. The open redirect is mitigated ...

CVE-2024-2015

The CVE-2024-2015 entry concerns ZhiCms 4.0. The vulnerability is in the getindexdata function of app/index/controller/mcontroller.php, where manipulation of the key argument enables SQL injection. Exploitation can be performed remotely, and public disclosures exist (VDB-255269). Some connected s...