|
313411
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range
[Why & How]
ASSERT if return NULL from kcalloc.
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-46808
|
2024-10-2 23:23 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313412
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
um: line: always fill *error_out in setup_one_line()
The pointer isn't initialized by callers, but I have
encountered cases where…
|
CWE-824
Access of Uninitialized Pointer
|
CVE-2024-46844
|
2024-10-2 23:22 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313413
|
5.4 |
MEDIUM
Network
|
millbeckcommunications
|
proroute_h685t-w_firmware
|
This vulnerability occurs when user-supplied input is improperly sanitized and then reflected back to the user's browser, allowing an attacker to execute arbitrary JavaScript in the context of the vi…
|
CWE-79
Cross-site Scripting
|
CVE-2024-38380
|
2024-10-2 23:22 |
2024-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313414
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
tracing/timerlat: Only clear timer if a kthread exists
The timerlat tracer can use user space threads to check for osnoise and
ti…
|
CWE-416
Use After Free
|
CVE-2024-46845
|
2024-10-2 23:18 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313415
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
mm: vmalloc: ensure vmap_block is initialised before adding to queue
Commit 8c61291fd850 ("mm: fix incorrect vbq reference in
pur…
|
CWE-129
Improper Validation of Array Index
|
CVE-2024-46847
|
2024-10-2 23:16 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313416
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
When disabling wifi mt7921_ipv6_addr_change() is called as…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-46860
|
2024-10-2 23:04 |
2024-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313417
|
6.1 |
MEDIUM
Network
|
tebilisim
|
v5
|
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in TE Informatics V5 allows Reflected XSS.This issue affects V5: before 6.2.
|
CWE-79
Cross-site Scripting
|
CVE-2024-2010
|
2024-10-2 22:52 |
2024-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313418
|
9.8 |
CRITICAL
Network
|
phpgurukul
|
online_shopping_portal
|
A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. …
|
CWE-89
SQL Injection
|
CVE-2024-9326
|
2024-10-2 22:33 |
2024-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313419
|
9.8 |
CRITICAL
Network
|
anisha
|
supply_chain_management
|
A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit_manufacturer.php. The manipulation …
|
CWE-89
SQL Injection
|
CVE-2024-9322
|
2024-10-2 22:32 |
2024-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
313420
|
7.5 |
HIGH
Network
|
code-projects
|
blood_bank_system
|
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of th…
|
CWE-89
SQL Injection
|
CVE-2024-9316
|
2024-10-2 22:29 |
2024-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
