11251 matches found
CVE-2024-27350
Amazon Fire OS 7 before 7.6.6.9 and 8 before 8.1.0.3 allows Fire TV applications to establish local ADB Android Debug Bridge connections. NOTE: some third parties dispute whether this has security relevance, because an ADB connection is only possible after the non-default ADB Debugging option is...
Amazon Fire OS Security Vulnerability
Amazon Fire OS is a suite of Android-based mobile operating systems developed by Amazon.com, Inc. that run on Amazon devices. A security vulnerability exists in Amazon Fire OS versions 7.x up to and including 7.6.6.9, and 8.x up to and including 8.1.0.3, which stems from a vulnerability that allo...
CVE-2024-27350
Amazon Fire OS versions 7 (before 7.6.6.9 ) and 8 (before 8.1.0.3 ) are vulnerable to a design/logic flaw allowing Fire TV applications to establish local ADB (Android Debug Bridge) connections . This is only possible if the non-default ADB Debugging option is enabled and the connection initiator...
PT-2024-21841
Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions 7.0.0 through 7.6.6.8 Amazon Fire OS versions 8.0.0 through 8.1.0.2 Description The issue allows Fire TV applications to establish local ADB Android Debug Bridge connections. This is only possible after the non-default...
Linux kernel security vulnerabilities
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux Kernel, which stems from a kernel error caused by a null pointer dereference triggered by CONFIGDEBUGLIST if this operation is disabled...
Design/Logic Flaw
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlparmemoryremovebyindex may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails,...
CVE-2023-52451
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlparmemoryremovebyindex may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails,...
CVE-2023-52451
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlparmemoryremovebyindex may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails,...
CVE-2024-24798
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
CVE-2024-24798
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
CVE-2024-24798
CVE-2024-24798 is a CSRF flaw in the WordPress Debug plugin up to version 1.10 (unathenticated exposure). PatchStack documents a fix in 1.11; upgrading to 1.11+ is recommended. NVD metrics show a high-severity vector (CVSS 3.1: 8.8 in some sources; PatchStack lists low severity 4.3) but the Patch...
CVE-2024-24798 WordPress Debug Plugin <= 1.10 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
CVE-2024-24798 WordPress Debug Plugin <= 1.10 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
WordPress Plugin Debug Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
CVE-2024-24798: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10...
PT-2024-20566 · Unknown · Soninow Team Debug
Name of the Vulnerable Software and Affected Versions: SoniNow Team Debug versions 1.10 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...
Backup Bolt < 1.4.0 - Sensitive Data Exposure
Description The plugin is vulnerable to Information Exposure via the unprotected access of debug logs. This makes it possible for unauthenticated attackers to retrieve the debug log which may contain information like system errors which could contain sensitive information. PoC Access the error lo...
PT-2024-7722 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the mm/debug vm pgtable component of the Linux kernel, specifically with the function pud advanced tests. It involves incorrect handling of devmap PUD p...