7479 matches found
OESA-2024-2155 ffmpeg security update
FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n5.1 to...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
thunderbird: Crash when aborting verification of OTR chat
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash...
CVE-2024-45833
Mattermost Mobile Apps versions =2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the default keyboard, the masking is off and the password contains a...
PT-2024-7582
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to an off-by-one error in the sd read block characteristics function. If a device returns page 0xb1 with a length of 8, this function may attempt an out-of-bounds memory...
PT-2024-32739
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to an off-by-one error in the ep93xx div recalc rate function, which can lead to an out-of-bounds read. The psc-div array has psc-num div elements, and the condition should...
CVE-2024-6910
The EventON WordPress plugin before 2.2.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
PT-2024-6983
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an off-by-one error in the CMA heap fault handler in the dma-buf: heaps component of the Linux kernel. This error allowed obtaining a mapping larger than the buff...
OESA-2024-2091 syslinux security update
Security Fixes: The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the...
mvm Component DoS
The vulnerability of the mvm component in the Linux operating system’s kernel is related to the use of the command line parameter “debugfs=off”. The mvm iwiwifi module uses an invalid pointer to debugfsdir and causes a NULL pointer dereferencing error in the kernel. Exploiting this vulnerability...
rsyslog Long Tag Off-By-Two Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'rsyslog Long Tag Off-By-Two DoS', 'Description' = %q This module triggers an off-by-two overflow in the rsyslog daemon. This flaw is unlikely to...
UBUNTU-CVE-2024-45440
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist...
SUSE CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...
Ivanti Avalanche < 6.4.4 Multiple Vulnerabilities
The version of Ivanti Avalanche running on the remote host is prior to 6.4.4. It is, therefore, is affected by multiple vulnerabilities : - An off-by-one error in WLInfoRailService allows a remote unauthenticated attacker to crash the service. CVE-2024-36136 - Improper input validation in the...
DEBIAN-CVE-2022-48918
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfsdir ptr before use When "debugfs=off" is used on the kernel command line, iwiwifi's mvm module uses an invalid/unchecked debugfsdir pointer and causes a BUG: BUG: kernel NULL pointer dereference, addres...