16956 matches found
BELL-CVE-2023-52464
Bulletin has no description...
BELL-CVE-2024-25629
Bulletin has no description...
CVE-2024-26150 `@backstage/backend-common` vulnerable to path traversal through symlinks
@backstage/backend-common is a common functionality library for backends for Backstage, an open platform for building developer portals. In @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the resolveSafeChildPath utility were not exhaustive enough, leadi...
CVE-2023-52455 iommu: Don't reserve 0-length IOVA region
In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmware doesn't setup the framebuffers, their address and size are 0 in "iommu-addresses" property. If IOVA region is reserved with 0 length, then it ends up corrupti...
BELL-CVE-2024-26591
Bulletin has no description...
BELL-CVE-2024-26589
Bulletin has no description...
BELL-CVE-2023-52451
Bulletin has no description...
BELL-CVE-2024-26586
Bulletin has no description...
BELL-CVE-2024-26588
Bulletin has no description...
BELL-CVE-2023-52444
Bulletin has no description...
BELL-CVE-2023-52445
Bulletin has no description...
BELL-CVE-2023-52447
Bulletin has no description...
BELL-CVE-2024-26583
Bulletin has no description...
PT-2024-19634 · Zkteco · Zkteco Zkbio Wdms
Name of the Vulnerable Software and Affected Versions: zkteco zkbio WDMS version 8.0.5 Description: An issue in the software allows an attacker to execute arbitrary code via the "/files/backup/" component. Recommendations: For zkteco zkbio WDMS version 8.0.5, consider restricting access to the...
CVE-2024-1749 Bdtask Bhojon Best Restaurant Management Software Message Page message cross site scripting
A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...
CVE-2023-52450 perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix NULL pointer dereference issue in upifilltopology Get logical socket id instead of physical id in discoverupitopology to avoid out-of-bound access on 'upi = &type-topologynididx;' line that leads to NUL...
Arbitrary Code Execution
pymatgen is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing input sanitization within the JonesFaithfulTransformation.fromtransformationstr method, allowing an attacker to execute malicious code within the context of the application...
BELL-CVE-2023-52434
Bulletin has no description...