Joomla 3.0.x < 3.10.17 / 4.0.x < 4.4.7 / 5.0.x < 5.1.3 Multiple Vulnerabilities (5910-joomla-5-1-3-and-4-4-7-security-and-bug-fix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 3.0.x prior to 3.10.17, 4.0.x prior to 4.4.7, or 5.0.x prior to 5.1.3. It is, therefore, affected by multiple vulnerabilities. - Inadequate validation of URLs could result into an invalid check...

PT-2024-30564 · Geshi +3 · Geshi +3

Name of the Vulnerable Software and Affected Versions: CKEditor4 versions prior to 4.25.0-lts Description: A potential vulnerability has been discovered in the CKEditor 4 Code Snippet GeSHi plugin, allowing a reflected XSS attack by exploiting a flaw in the GeSHi syntax highlighter library. The...

D-Link多款产品 命令注入漏洞

The D-Link DNS-320L and others are a NAS Network Attached Storage device from China's AUO D-Link. Command injection vulnerability exists in various D-Link products. The vulnerability originates from a function in the file /cgi-bin/myMusic.cgi, and the related operation can lead to command...

Apple Security Update: watchOS 10.6.1

Apple recommends to install security update watchOS 10.6.1 on devices Apple Watch Series 4 and later...

CVE-2024-42293

In the Linux kernel, the following vulnerability has been resolved: arm64: mm: Fix lockless walks with static and dynamic page-table folding Lina reports random oopsen originating from the fast GUP code when 16K pages are used with 4-level page-tables, the fourth level being folded at runtime due...

OSV-2024-1029 Stack-buffer-overflow in gf_hevc_parse_nalu_bs

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71146 Crash type: Stack-buffer-overflow WRITE 4 Crash state: gfhevcparsenalubs gfinspectdumpnaluinternal inspectprocess...

CVE-2023-7246

creationtimestamp| type| source ---|---|--- 2024-08-16 22:05:07+00:00| seen| https://t.me/cvedetector/3364 2025-04-04 14:05:31+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7246.yaml...

CVE-2024-7849

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-...

CVE-2024-7832

The CVE-2024-7832 issue concerns D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04. The vulnerability is in the function cgi_get_fullscr...

RUSTSEC-2024-0363 Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

The following presentation at this year's DEF CON was brought to our attention on the SQLx Discord: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to overflow,...

CVE-2023-46838 affecting package kernel for versions less than 6.6.35.1-4

CVE-2023-46838 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-36930 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36930 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-36893 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36893 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-36477 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36477 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-36902 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36902 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-36897 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36897 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-27022 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-27022 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2022-38096 affecting package kernel for versions less than 6.6.35.1-4

CVE-2022-38096 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-39277 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-39277 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2024-36891 affecting package kernel for versions less than 6.6.35.1-4

CVE-2024-36891 affecting package kernel for versions less than 6.6.35.1-4. An upgraded version of the package is available that resolves this issue...