|
312081
|
7.5 |
HIGH
Network
|
bevacqua
|
insane
|
insane is a whitelist-oriented HTML sanitizer. Versions 2.6.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publ…
|
CWE-1333
Inefficient Regular Expression Complexity
|
CVE-2020-26303
|
2024-11-14 04:55 |
2024-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312082
|
9.8 |
CRITICAL
Network
|
siemens
|
ruggedcom_rm1224_lte\(4g\)_eu_firmware
ruggedcom_rm1224_lte\(4g\)_nam_firmware
scalance_m804pb_firmware
scalance_m812-1_\(annex_a\)_firmware
scalance_m812-1_\(annex_b\)_firmware
scalan…
|
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB…
|
NVD-CWE-noinfo
|
CVE-2024-50557
|
2024-11-14 04:54 |
2024-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312083
|
6.1 |
MEDIUM
Network
|
slimselectjs
|
slim_select
|
Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption(), the text variable from the user-provided Options object is assigned…
|
CWE-79
Cross-site Scripting
|
CVE-2024-9440
|
2024-11-14 04:50 |
2024-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312084
|
6.1 |
MEDIUM
Network
|
microfocus
|
arcsight_management_center
arcsight_platform
|
A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Management Center and ArcSight Platform. The vulnerability could be remotely exploited.
|
CWE-79
Cross-site Scripting
|
CVE-2024-9841
|
2024-11-14 04:34 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312085
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
generic/077 on x86_32 CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y with…
|
NVD-CWE-noinfo
|
CVE-2024-50222
|
2024-11-14 04:23 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312086
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
KASAN reports that the GPU metrics table allocated in
vangogh_tables_i…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-50221
|
2024-11-14 04:23 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312087
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
Add check for the return value of spi_get_csgpiod() to avoid passing…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50224
|
2024-11-14 04:22 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312088
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
sched/numa: Fix the potential null pointer dereference in task_numa_work()
When running stress-ng-vm-segv test, we found a null p…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50223
|
2024-11-14 04:22 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312089
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix error propagation of split bios
The purpose of btrfs_bbio_propagate_error() shall be propagating an error
of split bio…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50225
|
2024-11-14 04:21 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
312090
|
9.8 |
CRITICAL
Network
|
dell
|
enterprise_sonic_distribution
|
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vu…
|
NVD-CWE-Other
|
CVE-2024-45764
|
2024-11-14 04:08 |
2024-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
