2371
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
Syzbot reported that after nilfs2 reads a corrupted file syst…
|
-
|
CVE-2024-50116
|
2024-11-9 01:15 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2372
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
A devm_kzalloc() in asoc_qcom_lpass_cpu_platform_probe()…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50103
|
2024-11-9 01:15 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2373
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
Replace the fake VLA at end of the vbva_mouse_po…
|
NVD-CWE-noinfo
|
CVE-2024-50134
|
2024-11-9 01:15 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2374
|
8.8 |
HIGH
Adjacent
|
enelx
|
waybox_pro_firmware
|
The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.
|
NVD-CWE-Other
|
CVE-2023-29126
|
2024-11-9 01:15 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2375
|
- |
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
Ignore nCR3[4:0] when loading PDPTEs from memory for nested SVM, as b…
|
-
|
CVE-2024-50115
|
2024-11-9 01:15 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2376
|
- |
|
-
|
-
|
Refit is an automatic type-safe REST library for .NET Core, Xamarin and .NET The various header-related Refit attributes (Header, HeaderCollection and Authorize) are vulnerable to CRLF injection. The…
|
CWE-93
CRLF Injection
|
CVE-2024-51501
|
2024-11-9 01:15 |
2024-11-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2377
|
7.0 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix user-after-free from session log off
There is racy issue between smb2 session log off and smb2 session setup.
It will …
|
CWE-416
Use After Free
|
CVE-2024-50086
|
2024-11-9 01:15 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2378
|
6.5 |
MEDIUM
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
vt: prevent kernel-infoleak in con_font_get()
font.data may not initialize all memory spaces depending on the implementation
of v…
|
CWE-909
Missing Initialization of Resource
|
CVE-2024-50076
|
2024-11-9 01:15 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2379
|
7.8 |
HIGH
Local
|
linux redhat
|
linux_kernel enterprise_linux
|
In the Linux kernel, the following vulnerability has been resolved:
parport: Proper fix for array out-of-bounds access
The recent fix for array out-of-bounds accesses replaced sprintf()
calls blind…
|
CWE-125
Out-of-bounds Read
|
CVE-2024-50074
|
2024-11-9 01:15 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
2380
|
4.7 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
We're seeing crashes from rq_qos_wake_function that look like …
|
NVD-CWE-noinfo
|
CVE-2024-50082
|
2024-11-9 01:15 |
2024-10-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|