PT-2024-37011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an atomicity violation in the fmc send cmd function. This occurs when the function is executed simultaneously with the modification of the fmdev-resp skb value. I...

PT-2024-36997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the sunrpc module, where the XPRT SOCK UPD TIMEOUT flag is not cleared when the transport is reset. This ca...

DEBIAN-CVE-2024-56540

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpusendreceiveinternal, which is...

UBUNTU-CVE-2024-53236

In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later...

PT-2024-34399 · Unknown · Smart Agent

Name of the Vulnerable Software and Affected Versions: Smart Agent version 1.1.0 Description: The issue allows a remote attacker to execute arbitrary code via the id parameter in the "/sendPushManually.php" component. This is a SQL injection vulnerability that can be exploited to run arbitrary...

The vulnerability of the bnxt_en component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bnxten component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the hwrmsend function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PT-2025-3650

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A missing return value check bug in the ksmbd module has been resolved. The issue occurs in the smb2 send interim resp function when ksmbd alloc work struct fails to allocate a node, returning ...

PT-2025-3022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the ivpu ipc send receive internal function, where a warning was fixed by moving pm runtime set active to...

send: Code Execution Vulnerability in Send Library

A flaw was found in the Send library. This vulnerability allows remote code execution via untrusted input passed to the SendStream.redirect function...

net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()

...

PT-2024-36453 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A Stored Cross-Site Scripting XSS issue exists in the /send message teacher to student.php file, allowing remote attackers to execute arbitrary scripts via the my message...

PT-2024-36454 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-learning Management System version 1.0 Description: A Stored Cross-Site Scripting XSS issue was found in the /send message.php endpoint of the Kashipara E-learning Management System. This issue allows remote attackers to execute...

CVE-2024-11374: Improper Neutralization of Input During Web Page Generation

The TWChat – Send or receive messages from users plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removequeryarg without appropriate escaping on the URL in all versions up to, and including, 4.0.4. This makes it possible for unauthenticated attackers to injec...

WordPress plugin myCred 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

kernel: mptcp: ensure snd_nxt is properly initialized on connect

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure sndnxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snduna: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 mptcpcleanuna+0x4b3/0x620 net/mptcp/protocol.c:1005 Modules...

SUSE CVE-2024-53059

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwlmvmsendcmdstatus, which handles...

PT-2024-10718

Name of the Vulnerable Software and Affected Versions BlueZ affected versions not specified Description The issue is related to a possible out of bounds read in the l2cu send peer config rej function of l2c utils.cc due to a missing bounds check. This could lead to remote information disclosure...

The vulnerability of the send component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the send component in the Linux operating system’s kernel is related to improper error handling in the iterate inoderef function. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2024-48896

A vulnerability was found in Moodle. It is possible for users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. Note: The name returned follows the full name format configured on the site...

Information Exposure

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Information Exposure via the sendinstantmessages function. An attacker can gain access to user names they should not have access to by exploiting this error message handling. Remediation Upgrade...