UBUNTU-CVE-2024-49990

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xegsc is not initialized when checked at HDCP capability check. Add gsc structure check to avoid null pointer error...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an index out-of-bounds issue in the DCN30 color conversion of the drm/amd/display module...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an issue in the drm/amd/display component that recalculates the DSC parameter when there is no stream link...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from multiple unchecked uses of the null pointer in the drm/amd/display component...

Exploit for CVE-2024-44337

CVE-2024-44337 CVE-2024-44337 POC The package github.com/gom...

drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails

...

BIT-GITLAB-2024-6530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances...

drm/amdgpu/pm: Fix the null pointer dereference for smu7

...

drm/amdgpu: Fix the null pointer dereference to ras_manager

...

drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules

...

drm/amdgpu: fix ucode out-of-bounds read warning

...

drm/vmwgfx: Fix a deadlock in dma buf fence polling

...

CVE-2024-6530 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 17.1 prior 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2. When adding a authorizing an application, it can be made to render as HTML under specific circumstances...

CVE-2024-6530

Removed by vendor...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

UBUNTU-CVE-2024-25885

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

CVE-2024-45463

A vulnerability has been identified in Teamcenter Visualization V14.2 All versions V14.2.0.14, Teamcenter Visualization V14.3 All versions V14.3.0.12, Teamcenter Visualization V2312 All versions V2312.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0016, Tecnomatix Plant Simulation V24...

[SECURITY] Fedora 39 Update: webkitgtk-2.46.1-1.fc39

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 40 Update: webkitgtk-2.46.1-1.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Fedora 40 : webkitgtk (2024-4c6304b6fa)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4c6304b6fa advisory. Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent fi...