|
249781
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
In the normal case, when we excute `echo 0 > /proc/fs/…
|
CWE-416
Use After Free
|
CVE-2024-50121
|
2024-11-9 03:05 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249782
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Handle kstrdup failures for passwords
In smb3_reconfigure(), after duplicating ctx->password and
ctx->password2 with…
|
NVD-CWE-noinfo
|
CVE-2024-50120
|
2024-11-9 03:04 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249783
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
cifs: fix warning when destroy 'cifs_io_request_pool'
There's a issue as follows:
WARNING: CPU: 1 PID: 27826 at mm/slub.c:4698 fr…
|
NVD-CWE-noinfo
|
CVE-2024-50119
|
2024-11-9 03:03 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249784
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
btrfs: reject ro->rw reconfiguration if there are hard ro requirements
[BUG]
Syzbot reports the following crash:
BTRFS info (d…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50118
|
2024-11-9 03:02 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249785
|
2.7 |
LOW
Network
|
grafana
|
grafana
|
Organization admins can delete pending invites created in an organization they are not part of.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2024-10452
|
2024-11-9 02:59 |
2024-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249786
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amd: Guard against bad data for ATIF ACPI method
If a BIOS provides bad data in response to an ATIF method call
this causes a…
|
CWE-476
NULL Pointer Dereference
|
CVE-2024-50117
|
2024-11-9 02:53 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249787
|
- |
|
-
|
-
|
Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier.
|
-
|
CVE-2024-51434
|
2024-11-9 02:35 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249788
|
- |
|
-
|
-
|
SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter.
|
-
|
CVE-2024-50766
|
2024-11-9 02:35 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249789
|
- |
|
-
|
-
|
The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.priv…
|
-
|
CVE-2024-46961
|
2024-11-9 02:35 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249790
|
- |
|
-
|
-
|
The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloa…
|
-
|
CVE-2024-46960
|
2024-11-9 02:35 |
2024-11-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|