CVE-2022-48843

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-48843

...

CVE-2022-48843

CVE-2022-48843 concerns the Linux kernel DRM/VRR subsystem. The issue arises when the DRM core attempts to set the VRR capable property on a connector even if the property is not attached (VRR supported only); this can lead to a NULL dereference. Connected advisories indicate this vulnerability h...

Error: Unable to Create Deployment in StoreFront

When creating a new deployment in StoreFront, the deployment fails with the following error: "Unable to Create Deployment " This error is logged in Event Viewer: New Server Deployment Citrix.DeliveryServices.PowerShell.Command.Runner.Exceptions.PowerShellExecutionException: An error occured runni...

GHSA-W5FC-GJ3H-26RX speaker vulnerable to Denial of Service

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

CVE-2024-21521

CVE-2024-21521 affects the @discordjs/opus package (native bindings to libopus). The vulnerability arises when an input object with a toString property is passed to several functions, potentially causing a system crash (DoS). If exploiting details are provided, they would be consistent with a Den...

PT-2024-18935 · Unknown · @Discordjs/Opus

Name of the Vulnerable Software and Affected Versions: @discordjs/opus versions all Description: The issue is related to a Denial of Service DoS condition that can occur when an input object with a toString property is provided to several different functions. This can lead to a system or process...

TIBCO Software Jaspersoft JasperReports Server Security Vulnerability

TIBCO Software Jaspersoft JasperReports Server is a report generation tool from TIBCO Software, USA. The product supports PDF, HTML, XLS, CSV and XML file output formats. A security vulnerability exists in TIBCO Software Jaspersoft JasperReports Server versions 8.0.4 through 9.0.0, which stems fr...

Cybersecurity Agencies Warn of China-linked APT40's Rapid Exploit Adaptation

Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K., and the U.S. have released a joint advisory about a China-linked cyber espionage group called APT40, warning about its ability to co-opt exploits for newly disclosed security flaws within hours or...

Exploit for Code Injection in Geoserver

CVE-2024-36401 Remote Code Execution RCE Vulnerability In...

CBL Mariner 2.0 Security Update: cri-o (CVE-2024-3154)

The version of cri-o installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3154 advisory. - A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier...

Prototype Pollution

@amoy/common is vulnerable to Prototype Pollution. The vulnerability is due to functions like extend and setValue, which can be exploited by passing crafted arguments with a proto property. This allows attackers to alter the behavior of all objects inheriting from the affected prototype...

Prototype Pollution

@jsonic/jsonic-next is vulnerable to Prototype Pollution. The vulnerability is due to several functions including empty, util.clone, util.prop, util.deep, and make, which can be exploited by passing crafted arguments with the proto property. This allows attackers to alter the behavior of all...

PT-2024-28361 · Unknown · Residencecms

Name of the Vulnerable Software and Affected Versions: ResidenceCMS version 2.10.1 Description: A stored cross-site scripting XSS issue exists, allowing a low-privilege user to create malicious property content with HTML inside, which acts as a stored XSS payload. Recommendations: For ResidenceCM...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Jul-2024 Release 1, which stems from an improper access control issue in the system property. A local...

PT-2024-25997 · Unknown · System Property

Name of the Vulnerable Software and Affected Versions: System property versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in system property, allowing local attackers to obtain the device identifier. Recommendations: For versions prior to SMR...