PT-2024-3063

Name of the Vulnerable Software and Affected Versions D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L versions up to 20240403 Description A very critical vulnerability has been found in the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L devices. This issue affects the processing of the file...

GHSA-75HQ-H6G9-H4Q5 Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

Impact The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, when executed at runtime, may cause this panic. The panic in question is caused when a...

UBUNTU-CVE-2024-26670

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD Currently the ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD workaround isn't quite right, as it is supposed to be applied after the last explicit memory access, but is immediately...

CVE-2024-26670 arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD Currently the ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD workaround isn't quite right, as it is supposed to be applied after the last explicit memory access, but is immediately...

CVE-2024-26670 arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD Currently the ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD workaround isn't quite right, as it is supposed to be applied after the last explicit memory access, but is immediately...

CVE-2024-26670

CVE-2024-26670 : Linux kernel arm64 workaround for speculative unpriv load (Cortex-A520/A510 errata) fix. The patch ensures the TLBI+DSB sequence is executed after all explicit memory accesses and places it immediately before the ERET when pagetable isolation is disabled. It reworks the KPTI/eret...

CVE-2024-26670

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD Currently the ARM64WORKAROUNDSPECULATIVEUNPRIVLOAD workaround isn't quite right, as it is supposed to be applied after the last explicit memory access, but is immediately...

PT-2024-24101 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic vulnerability was found in DedeCMS, affecting unknown code of the file /src/dede/makehtml map.php. This issue leads to cross-site request forgery and can be initiated remotely. The exploit has be...

PT-2024-23309

Name of the Vulnerable Software and Affected Versions: Wasmtime version 19.0.0 Description: The issue is related to a regression in Wasmtime that can cause a panic in the host runtime when a guest WebAssembly module is executed. This panic occurs when a WebAssembly module issues a table...

PT-2024-24077 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A vulnerability was found in DedeCMS, affecting an unknown functionality of the file /src/dede/makehtml spec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

PT-2024-24128 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System up to 20240325 Description: A vulnerability was found in the Bdtask Multi-Store Inventory Management System, affecting an unknown function of the file /stockmovment/stockmovment/delete/ of the...

PT-2024-23720 · Wuzhicms · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHICMS version 4.1.0 Description: An issue was discovered in WUZHICMS, allowing an attacker to execute arbitrary code and obtain sensitive information via the "index.php" file. Recommendations: For WUZHICMS version 4.1.0, consider disabling...

PT-2024-24091 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic issue has been found in DedeCMS, affecting an unknown part of the file /src/dede/makehtml rss action.php. This issue leads to cross-site request forgery and can be initiated remotely. The exploit...

PT-2024-23620 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-641-2-g1529b83 Description: An issue was discovered in Bento4, leading to a Denial of Service DoS. The issue is caused by a heap overflow in AP4 Dec3Atom::AP4 Dec3Atom at Ap4Dec3Atom.cpp. This can be demonstrated by...

PT-2024-23718 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 Bento version 1.6.0-641 Description: An issue in Bento4 Bento allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp, AP4 MdhdAtom::AP4 MdhdAtom, mp4fragment. Recommendations: For Bento4 Bento version 1.6.0-641,...

PT-2024-24112 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: A critical issue has been found in the processing of the file dede/makehtml archives action.php, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

PT-2024-21448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a vulnerability related to the ARM64 WORKAROUND SPECULATIVE UNPRIV LOAD workaround. This workaround is used to handle Cortex-A520 erratum 2966298 and Cortex-A510...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security flaw in arm64WORKAROUNDSPECULATIVEUNPRIVLOAD...

PT-2024-21460

Name of the Vulnerable Software and Affected Versions Linux kernel versions = 6.7.4 Description The issue is related to the wifi mac80211 component in the Linux kernel, where some access points APs have ECSA elements stuck in their probe response. This causes the kernel to not attempt to connect...

PT-2024-3606 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 2024.1.0.23997 Description: A type confusion vulnerability exists in the way Foxit Reader handles a Lock object. This can be triggered by a specially crafted Javascript code inside a malicious PDF document, leading to...