20050 matches found
Unspecified vulnerability in Linux kernel (CNVD-2024-40293)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking whether the denominator is zero. No details of the vulnerability are provided at this time...
Unspecified vulnerability in Linux kernel (CNVD-2024-40279)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle timers when handling timer interrupts. No details of the vulnerability are...
Unspecified vulnerability in Linux kernel (CNVD-2024-40294)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...
Mattermost Unauthorized Access Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an unauthorized access vulnerability that stems from a failure to restrict access to channel files that are not linked to a post. An attacker could exploit the vulnerability to...
Unspecified vulnerability in Linux kernel (CNVD-2024-40281)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of a deadlock problem. No details of the vulnerability are provided at this time...
Mattermost Resource-Consuming Vulnerability
Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...
Unspecified vulnerability in Linux kernel (CNVD-2024-40273)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from failing to ensure that the connector is fully initialized before sending an HPD event. No details of the...
Unspecified vulnerability in Linux kernel (CNVD-2024-40290)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking if debug traps are enabled. No details of the vulnerability are provided at this time...
Unspecified vulnerability in Linux kernel (CNVD-2024-40274)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not checking the validity of an index before accessing the bwparams array. No details of the vulnerability a...
Unspecified vulnerability in Linux kernel (CNVD-2024-40271)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to null-check pointers. No details of the vulnerability are provided at this time...
CVE-2024-47070 authentik vulnerable to password authentication bypass via X-Forwarded-For HTTP header
authentik is an open-source identity provider. A vulnerability that exists in versions prior to 2024.8.3 and 2024.6.5 allows bypassing password login by adding X-Forwarded-For header with an unparsable IP address, e.g. a. This results in a possibility of logging into any account with a known logi...
RPShare 安全漏洞
RPShare is a client-side Fabric mod and server-side Paper plugin open-sourced by Plasmo. It allows players to quickly share resource packs. A security vulnerability exists in RPShare version v.1.0.0, which stems from the presence of a directory traversal vulnerability that allows remote attackers...
freeimage 安全漏洞
FreeImage is FreeImage open source a cross-platform for supporting popular graphic image formats open source library . freeimage has a buffer overflow vulnerability , the vulnerability stems from the size of the configuration file is not cleaned up , an attacker can use this vulnerability to caus...
authentik 安全漏洞
authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik that stems from the fact that users can steal their legitimately obtained access tokens and use them to access other applications that they are not authorized to...
cups 输入验证错误漏洞
CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS libppd, which can be exploited by an attacker to execute arbitrary code on the system...
RHEL 9 : grafana (RHSA-2024:7202)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7202 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: encoding/gob: golang:...
Mattermost 安全漏洞
Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...
Grafana Agent 安全漏洞
Grafana Agent is an OpenTry Collector distribution of Grafana open source. A security vulnerability exists in Grafana Agent versions prior to 0.43.2 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...
Malicious code in storj-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c29c7e82f958f9ed89af6fc324d687bfe4e15d4b2aa49fee39f5aeeb4eee5583 The OpenSSF Package Analysis project identified 'storj-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
