3955 matches found
CVE-2024-4779: Improper Neutralization of Special Elements used in an SQL Command
The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to SQL Injection via the ‘datapostids0’ parameter in all versions up to, and including, 1.5.107 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...
CVE-2021-47348
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual target field, the code was reading 8. This could result in a corrupted value if the trailing 3 bytes were non-zero, so...
CVE-2021-47239 net: usb: fix possible use-after-free in smsc75xx_bind
In the Linux kernel, the following vulnerability has been resolved: net: usb: fix possible use-after-free in smsc75xxbind The commit 46a8b29c6306 "net: usb: fix memory leak in smsc75xxbind" fails to clean up the work scheduled in smsc75xxreset- smsc75xxsetmulticast, which leads to use-after-free ...
SUSE SLED15: libtss2-esys0 / libtss2-esys0-32bit / libtss2-fapi1 / etc (SUSE-SU-2024:1635-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1635-1 advisory. - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690. Tenable has extracted the...
SUSE-SU-2024:1635-2 Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...
SUSE-SU-2024:1635-1 Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...
Debian dla-3814 : libglib2.0-0 - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3814 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3814-1 [email protected] https://www.debian.org/lts/security/...
SUSE-SU-2024:1605-1 Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by FapiVerifyQuote bsc1223690...
AIX (IJ50827)
The version of AIX installed on the remote host is prior to APAR IJ50827. It is, therefore, affected by a vulnerability as referenced in the IJ50827 advisory. - An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and...
PT-2024-32148
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8.0-24-generic 24 and earlier Description A NULL pointer dereference vulnerability has been resolved in the Linux kernel. The issue occurs when the profile-parent-dentsAAFS PROF DIR pointer is NULL, which can happen if...
Debian dsa-5682 : libglib2.0-0 - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5682 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5682-1 [email protected] https://www.debian.org/security/...
Ryu Infinite Loop vulnerability
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...
Ryu Infinite Loop vulnerability
OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via action.len=0...
GHSA-FGPW-CX3V-WJ95 Ryu Infinite Loop vulnerability
OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...
GHSA-M9VM-8MV9-V5V3 Ryu Infinite Loop vulnerability
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...
GHSA-FFP9-PFQ9-G2WW Ryu Infinite Loop vulnerability
OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...
CVE-2024-34486
OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...
CVE-2024-34489
OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via length=0...
CVE-2024-34487: Loop with Unreachable Exit Condition
OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...