CVE-2024-26774 ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid dividing by 0 in mbupdateavgfragmentsize when block bitmap corrupt Determine if bbfragments is 0 instead of determining bbfree to eliminate the risk of dividing by zero when the block bitmap is corrupted...

Arbitrary Code Execution

gtkwave is vulnerable to Arbitrary Code Execution.This vulnerability arises from improper input validation in LXT2 lxt2rdexpandintegertobits function.An attacker could exploit this vulnerability by crafting a malicious .lxt2 file, which, when opened by a victim, could execute arbitrary code...

BELL-CVE-2024-26661

Bulletin has no description...

BELL-CVE-2023-52636

Bulletin has no description...

BELL-CVE-2024-26681

Bulletin has no description...

BELL-CVE-2024-26679

Bulletin has no description...

BELL-CVE-2024-26673

Bulletin has no description...

BELL-CVE-2024-26671

Bulletin has no description...

BELL-CVE-2024-26668

Bulletin has no description...

BELL-CVE-2023-52630

Bulletin has no description...

CVE-2024-30809

An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4Sample::GetOffset const, leading to a Denial of Service DoS, as demonstrated by mp42ts...

Bonita cross-site scripting vulnerability

Bonita before 10.1.0.W11 allows stored XSS via a UI screen in the administration panel...

CVE-2024-31033

JJWT aka Java JWT through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey method within the DefaultJwtParser class and the signWith method within the DefaultJwtBuilder class. NOTE: the vendor disputes thi...

PUB-A-303107287

Bulletin has no description...

BIT-MOODLE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url

The URL parameters accepted by forum search were not limited to the allowed parameters...

WordPress Filter Custom Fields & Taxonomies Light Plugin <= 1.05 is vulnerable to PHP Object Injection

Software Filter Custom Fields & Taxonomies Light Type Plugin Vulnerable versions = 1.05 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-31094 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 49ff4d1a6e1e Credits Mika Required...

BIT-GRAFANA-2024-1313 Users outside an organization can delete a snapshot with its key

It is possible for a user in a different organization from the owner of a snapshot to bypass authorization and delete a snapshot by issuing a DELETE request to /api/snapshots/ using its view key. This functionality is intended to only be available to individuals with the permission to write/edit ...

BELL-CVE-2023-45931

Bulletin has no description...

BELL-CVE-2024-26646

Bulletin has no description...

GHSA-JJF4-959W-F545 SQL Injection vulnerability in Reportico Till

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter...