CVE-2024-1875
published 2024-02-26CVE-2024-1875: A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file…
PriorityP359high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.85%
54.0th percentile
A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254723.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| razormist | complaint_management_system | — | — |
| sourcecodester | complaint_management_system | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q8hf-gfmq-m739: A vulnerability was found in SourceCodester Complaint Management System 1
ghsa_unreviewed·2024-02-26
CVE-2024-1875 [MEDIUM] CWE-434 GHSA-q8hf-gfmq-m739: A vulnerability was found in SourceCodester Complaint Management System 1
A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affects some unknown processing of the file users/register-complaint.php of the component Lodge Complaint Section. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254723.
Red Hat
kernel: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
vendor_redhat·2024-05-01·CVSS 5.5
CVE-2024-27044 [MEDIUM] kernel: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
kernel: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
The 'stream' pointer is used in dcn10_set_output_transfer_func() before
the check if 'stream' is NULL.
Fixes the below:
drivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn10/dcn10_hwseq.c:1892 dcn10_set_output_transfer_func() warn: variable dereferenced before check 'stream' (see line 1875)
Potential NULL pointer dereferences in the Linux kernel in drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c. This may lead to a crash.
Statement: Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.
Package: kerne
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4https://vuldb.com/?ctiid.254723https://vuldb.com/?id.254723https://toradah.notion.site/Remote-Code-Execution-RCE-via-Unrestricted-File-Upload-6ed7ae9c833c4d8baaae7d64ae0c4a47?pvs=4https://vuldb.com/?ctiid.254723https://vuldb.com/?id.254723
2024-02-26
Published