CVE-2024-29150

Alcatel-Lucent ALE NOE deskphones (versions 86x8_NOE-R300.1.40.12.4180 and earlier) and ALE SIP deskphones (versions 86x8_SIP-R200.1.01.10.728 and earlier) are vulnerable to a flaw caused by improper privilege management . An authenticated attacker can create symbolic links to sensitive or protec...

PT-2024-22767 · Alcatel Lucent · Alcatel-Lucent Ale Noe Deskphones +1

Name of the Vulnerable Software and Affected Versions: Alcatel-Lucent ALE NOE deskphones versions 86x8 NOE-R300.1.40.12.4180 and earlier Alcatel-Lucent ALE SIP deskphones versions 86x8 SIP-R200.1.01.10.728 and earlier Description: An issue was discovered due to improper privilege management,...

ThinkPHP Cross-Site Scripting Vulnerability

ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...

CVE-2024-34467

The ThinkPHP 8.0.3 framework is vulnerable to Cross-Site Scripting (XSS) because of inadequate filtering of function argument values within the think_exception.tpl file. Additionally, the same file can lead to Sensitive Information Disclosure , where remote attackers can discover the PHPSESSION c...

CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

UBUNTU-CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

CVE-2024-33915

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...

CVE-2024-33915

CVE-2024-33915 corresponds to a Missing Authorization vulnerability in the WordPress plugin Debug Log Manager. Affected software: Debug Log Manager versions up to 2.3.1. Root cause per the sources: insufficient access control (Missing Authorization) likely enabling unauthorized actions. CVSS 3.1/...

CVE-2024-33915 WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...

CVE-2024-33915 WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...

SUSE CVE-2024-26940

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Create debugfs ttmresourcemanager entry only if needed The driver creates /sys/kernel/debug/dri/0/mobttm even when the corresponding ttmresourcemanager is not allocated. This leads to a crash when trying to read from...

SUSE CVE-2024-26953

In the Linux kernel, the following vulnerability has been resolved: net: esp: fix bad handling of pages from pagepool When the skb is reorganized during espoutput !esp-inline, the pages coming from the original skb fragments are supposed to be released back to the system through putpage. But if t...

SUSE CVE-2024-27067

In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when unbinding an event channel When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIGDEBUGSHIRQ. This might cause a WARN in the handle...

WordPress plugin Debug Log Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-33915: Missing Authorization

Missing Authorization vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.1...

PT-2024-25548 · Unknown · Bowo Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Bowo Debug Log Manager versions prior to 2.3.1 Description: The issue is related to a Missing Authorization vulnerability in Bowo Debug Log Manager. Recommendations: For versions prior to 2.3.1, update to a version that contains a fix for thi...

The vulnerability of the formSetDebugCfg() function (/goform/setDebugCfg) in the Tenda W15E router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDebugCfg function /goform/setDebugCfg in the Tenda W15E router’s microprogramming software lies in the issue where the operation outputs outside the buffer in memory when processing the parameters enable, level, and module. Exploiting this vulnerability allows an...

CVE-2022-48699: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...