kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLAVFVLANLIST attribute validation Each attribute inside a nested IFLAVFVLANLIST is assumed to be a struct iflavfvlaninfo so the size of such attribute needs to be at least of sizeofstruct iflavfvlaninf...

CVE-2024-6766

The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attac...

SUSE CVE-2024-41016

In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2xattrfindentry xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this...

SUSE CVE-2024-42160

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

CVE-2024-6766: Improper Neutralization of Input During Web Page Generation

The shortcodes-ultimate-pro WordPress plugin before 7.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attac...

WordPress Plugin Shortcodes-Ultimate-Pro has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-28901 · Unknown · Pantera Crm

Name of the Vulnerable Software and Affected Versions: Pantera CRM versions 401.152 through 402.072 Description: A mass assignment issue exists, allowing authenticated users to modify any user attribute, including roles, by injecting additional parameters via profile management functions...

KB5030503: Servicing stack update for Windows 10: September 12, 2023

KB5030503: Servicing stack update for Windows 10: September 12, 2023 Applies To Windows 10 Note REMINDER Windows 10, version 1507 reached end of service on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise LoT editions. After April 9, 2019, these devices are no...

May 23, 2023—KB5026436 (OS Build 22000.2003) Preview

May 23, 2023—KB5026436 OS Build 22000.2003 Preview Applies To Windows 11 version 21H2, all editions Note 3/28/23 IMPORTANT Starting in April 2023, optional, non-security preview updates will release on the fourth Tuesday of the month. For more information, see Windows monthly updates explained...

CVE-2024-3827

The Spectra Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block ids in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

DST correction in Windows for the Fiji Islands: October 13, 2020

DST correction in Windows for the Fiji Islands: October 13, 2020 Applies To Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server...

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution

MS10-062: Vulnerability in MPEG-4 Codec could allow remote code execution Applies To Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Datacenter Windows Server 2008...

Servicing stack update for Windows 10, version 1903 and 1909: February 11, 2020

Servicing stack update for Windows 10, version 1903 and 1909: February 11, 2020 Applies To Windows 10, version 1903, all editions Windows 10, version 1909, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates...

Servicing stack update for Windows 10, version 2004 and 20H2: January 12, 2021

Servicing stack update for Windows 10, version 2004 and 20H2: January 12, 2021 Applies To Windows 10 This update applies to the following: Windows 10, version 2004 for 32-bit Systems Windows 10, version 2004 for ARM64-based Systems Windows 10, version 2004 for x64-based Systems Windows 10, versio...

Servicing stack update for Windows 10, version 2004 and 20H2: November 10, 2020

Servicing stack update for Windows 10, version 2004 and 20H2: November 10, 2020 Applies To Windows 10 This update applies to the following: Windows 10, version 2004 for 32-bit Systems Windows 10, version 2004 for x64-based Systems Windows 10, version 2004 for ARM64-based Systems Windows Server,...

Servicing stack update for Windows 10: June 9, 2020

Servicing stack update for Windows 10: June 9, 2020 Applies To Windows 10 Applies to Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates...

Servicing stack update for Windows 10, version 1709: June 9, 2020

Servicing stack update for Windows 10, version 1709: June 9, 2020 Applies To Windows 10, version 1709, all editions Windows Server version 1709 Applies to Windows 10 Version 1709 for 32-bit Systems Windows 10 Version 1709 for ARM64-based Systems Windows 10 Version 1709 for x64-based Systems Windo...

Servicing stack update for Windows 10 version 1703: September 10, 2019

Servicing stack update for Windows 10 version 1703: September 10, 2019 Applies To Windows 10, version 1703, all editions Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addressed an issue in which...

MS12-006: Description of the security update for Webio, Winhttp, and schannel in Windows: January 10, 2012

MS12-006: Description of the security update for Webio, Winhttp, and schannel in Windows: January 10, 2012 Applies To Windows 7 Service Pack 1 Windows 7 Enterprise Windows 7 Home Basic Windows 7 Home Premium Windows 7 Professional Windows 7 Ultimate Windows 7 Enterprise Windows 7 Home Basic Windo...

CVE-2024-2455

The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget wrapper link URL in all versions up to, and including, 7.9.0 due to insufficient input sanitization and output escaping on user supplied attributes...