10333 matches found
RHEL 4 : samba (RHSA-2016:0625)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0625 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...
WordPress Loginizer Security Plugin <= 1.9.2 is vulnerable to Broken Authentication
Software Loginizer Security Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.9.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10097 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 39d130db7003 Credits...
WordPress UW Freelancer Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)
Software UW Freelancer Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51706 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dbafd19742b3 Credits João Pedro S Alcântara Kinorth Require...
CVE-2024-28052
The WBR-6012 is a wireless SOHO router. It is a low-cost device which functions as an internet gateway for homes and small offices while aiming to be easy to configure and operate. In addition to providing a WiFi access point, the device serves as a 4-port wired router and implements a variety of...
FreeBSD -- Unbounded allocation in ctl(4) CAM Target Layer
Problem Description: The command ctlpersistentreserveout allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator. Impact: A malicious guest could cause a Denial of Service DoS on the host...
CVE-2022-1941 affecting package mysql for versions less than 8.0.40-1
CVE-2022-1941 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...
PT-2024-9137 · Unknown · Ashpostgres
Name of the Vulnerable Software and Affected Versions: AshPostgres versions 2.0.0 through 2.4.9 Description: The issue is related to the skipping of policies in update actions under specific conditions, allowing side effects to be triggered when they should not have been. This occurs only on...
CVE-2024-50031
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...
CVE-2022-48954 s390/qeth: fix use-after-free in hsci
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was dereferenced after br2deveventwork was freed. ================================================================== BUG: KASAN: use-after-free in...
CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...
CVE-2024-50031 drm/v3d: Stop the active perfmon before being destroyed
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop the active perfmon before being destroyed When running kmscube with one or more performance monitors enabled via GALLIUMHUD, the following kernel panic can occur: 55.008324 Unable to handle kernel paging request at...
CVE-2024-50031
CVE-2024-50031 affects the Linux kernel DRM/V3D perfmon handling. When kmscube runs with GALLIUM_HUD and perfmon monitors are destroyed, v3d->active_perfmon may be left as a stale pointer, causing a kernel panic on subsequent runs as the driver attempts to stop a non-existent perfmon. The prov...
CVE-2024-9382
The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9382
CVE-2024-9382 describes a Reflected Cross-Site Scripting (XSS) in the Gantry 4 Framework plugin for WordPress. The vulnerability arises from insufficient input sanitization and output escaping in the override_id parameter, affecting all versions up to and including 4.1.21. It allows unauthenticat...
CVE-2024-9382 Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-9382 Gantry 4 Framework <= 4.1.21 - Reflected Cross-Site Scripting
The Gantry 4 Framework plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'overrideid' parameter in all versions up to, and including, 4.1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
WordPress plugin Gantry 4 Framework 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Security Bulletin: IBM Sterling Control Center is affected by multiple container-level vulnerabilities
Summary IBM Sterling Control Center container includes a vulnerable version of glibc at the OS level, affected by a denial of service Vulnerability Details CVEID:CVE-2024-33602 DESCRIPTION: glibc is vulnerable to a denial of service, caused by a memory corruption by the Name Service Cache Daemon'...
WordPress Gantry 4 Framework Plugin <= 4.1.21 is vulnerable to Cross Site Scripting (XSS)
Software Gantry 4 Framework Type Plugin Vulnerable versions = 4.1.21 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9382 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2e1bc106a0d6 Credits vgo0 Required...
CVE-2024-6345 affecting package python-setuptools for versions less than 69.0.3-4
CVE-2024-6345 affecting package python-setuptools for versions less than 69.0.3-4. A patched version of the package is available...