PT-2024-10253 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: The issue is related to a buffer overflow vulnerability. The anonymous protect status field is copied to the stack without length verification, which can be exploited by a remote attacker to...

Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-12111 Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

The vulnerability of the sub_1225C function in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary commands.

The vulnerability of function sub1225C in the mainfunction.cgi web interface of the DrayTek Vigor router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

XWiki Platform 安全漏洞

XWiki Platform is XWiki's open source suite of wiki platforms for creating web collaboration applications. A security vulnerability exists in XWiki Platform versions 1.2-milestone-2 through 16.3.0, which stems from the fact that any user with a master wiki account can run scheduling operations on...

UBUNTU-CVE-2024-47601

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxparseblockgrouporsimpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer sub...

CVE-2024-1543

...

CVE-2024-42494

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services...

CVE-2024-42494: Exposure of Private Personal Information to an Unauthorized Actor

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a a feature that could enable sub accounts or attackers to view and exfiltrate sensitive information from all cloud accounts registered to Ruijie's services...

Is secure boot on the main application processor enough?

TL;DR Secure boot ensures only authentic firmware can run on a device and should form part of a layered defence strategy. Sub-systems often lack secure boot capabilities, limiting protection for non-critical processors. Focus on secure boot for the main processor; it can provide adequate security...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from the inclusion of an insecure privilege vulnerability. A local attacker exploiting this vulnerability could execute arbitrary code via the initialposesub thread created by...

CVE-2024-49503: Improper Neutralization of Input During Web Page Generation

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials sub page. This issue affects Container suse/manager/5.0/x8664/server:5.0.2.7.8.1: before...

CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

[SECURITY] Fedora 40 Update: llvm-test-suite-18.1.8-3.fc40

C/C++ Compiler Test Suite that is maintained as an LLVM sub-project. This te st suite can be run with any compiler, not just clang...

Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2024-766)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-766 advisory. node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders c...

CVE-2024-51996 Symphony has an Authentication Bypass via RememberMe

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. Th...

SUSE CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

DEBIAN-CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...

UBUNTU-CVE-2024-50207

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix reader locking when changing the sub buffer order The function ringbuffersubbuforderset updates each ringbufferpercpu and installs new sub buffers that match the requested page order. This operation may be invoke...