The vulnerability of the `nft_setelem_catchall_deactivate()` function in the `net/netfilter/nf_tables_api.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges.

The vulnerability of the nftsetelemcatchalldeactivate function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nft_verdict_init() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information, thereby enhancing their privileges.

The vulnerability of the nftverdictinit function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

PT-2024-21581 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a bogus requirement added for runtime PM managed devices to be in the RPM ACTIVE state for PME polling. In fact, only devices in low power states should be...

Memory Corruption

Google Chrome is vulnerable to Memory Corruption. The vulnerability is caused due to an inappropriate implementation in Accessibility. This can allow a remote attacker to potentially exploit object corruption via a crafted HTML page...

The vulnerability of the Accessibility component in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of the Accessibility component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Accessibility Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-24705 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8ca8558b0216 Credits Nguyen Xuan Chien...

The vulnerability of the SetWirelessRepeat function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWirelessRepeat function in the microprogramming software for Tenda AC10U lies in the reading of data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protect...

Vulnerability of the formWifiMacFilterGet() function in the httpd daemon of the wireless access point Tenda i6 software, which allows a intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the formWifiMacFilterGet function in the httpd daemon of the microprogrammed wireless access points from Tenda i6 is related to the operation that goes beyond the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the __ext4_remount() function in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ext4remount function in Linux operating systems is related to the use of memory after it is freed when processing old file names with the CONFIGQUOTA configuration. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formSetCfm() function in the httpd daemon of the microprogramming software for wireless access points from Tenda W6, which allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetCfm function in the httpd daemon of the microprogrammed wireless access points of Tenda W6 is related to the operation that goes beyond the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow an attacker to compromise...

Google Chrome Security Bypass Vulnerability (CNVD-2024-10241)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome version 121.0.6167.85 and earlier versions due to an improper implementation in an accessibility feature. An attacker can exploit the vulnerability to bypass security...

Chromium: CVE-2024-0812 Inappropriate implementation in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

Debian dsa-5607 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5607 advisory. - Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTM...

The vulnerability of the Splunk Enterprise platform for operational analysis in Windows operating systems lies in the restoration of unreliable data in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the Splunk Enterprise operating system for Windows platform lies in the recovery of unreliable data in memory due to an incorrect path being used to access files on the disk partition. Exploiting this vulnerability can allow an attacker to compromise the integrity,...

CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

Memory corruption

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...

CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...