12021 matches found
CVE-2024-47031
Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861...
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Summary Usage of the Butterfly.prototype.parseJSON or getJSON functions on an attacker-controlled crafted input string allows the attacker to execute arbitrary JavaScript code on the server. Since Butterfly JavaScript code has access to Java classes, it can run arbitrary programs. Details The...
On Monday, October 21, updates for the critical Remote Code Execution – VMware vCenter (CVE-2024-38812) vulnerability were released again
On Monday, October 21, updates for the critical Remote Code Execution - VMware vCenter CVE-2024-38812 vulnerabilitywere released again. Wait, haven't fixes for this vulnerability been available since September 17th? They were, but it was not enough. " VMware by Broadcom has determined that the...
CVE-2024-49946
In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...
CVE-2024-50039
CVE-2024-50039 (Linux kernel) : The vulnerability resides in the net/sched subsystem where TCA_STAB is accepted only for the root qdisc. The bug arises because most qdiscs track backlog assuming invariance of qdisc_pkt_len(skb) between enqueue() and dequeue(), but a syzbot-triggered combination o...
CVE-2024-49939 wifi: rtw89: avoid to add interface to list twice when SER
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to add interface to list twice when SER If SER L2 occurs during the WoWLAN resume flow, the add interface flow is triggered by ieee80211reconfig. However, due to rtw89wowresume return failure, it will cause the...
CVE-2024-49934 fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
In the Linux kernel, the following vulnerability has been resolved: fs/inode: Prevent dumpmapping accessing invalid dentry.dname.name It's observed that a crash occurs during hot-remove a memory device, in which user is accessing the hugetlb. See calltrace as following: ------------ cut here...
CVE-2024-49866 tracing/timerlat: Fix a race during cpuhp processing
In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Fix a race during cpuhp processing There is another found exception that the "timerlat/1" thread was scheduled on CPU0, and lead to timer corruption finally: ODEBUG: init active active state 0 object:...
MAL-2024-10223 Malicious code in zen-ruby-linter (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10169 Malicious code in test-package-sample (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10150 Malicious code in raimbowxyz (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10132 Malicious code in python-consul2-hh (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10041 Malicious code in marshall (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9964 Malicious code in cryptoaitools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9946 Malicious code in atomicdecoderss (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9928 Malicious code in zwirir (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9927 Malicious code in zonal-indigo-tahr (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9924 Malicious code in zierber (npm)
--- -= Per source details. Do not edit below this line.=-...