935 matches found
CVE-2024-53690
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfsrmdir. 1 Because the inode bitmap is corrupted, an inode with an inode number that should exist as a ".nilfs" file was reassigned by nilfsmkdir for "file0",...
CVE-2024-57838
CVE-2024-57838 affects the Linux kernel on s390 where stack-depot filtering cannot de-duplicate stacks because the .irqentry.text section is empty. The root cause is that IO/EXT interrupt handlers were not correctly placed into the .irqentry.text region on s390, hindering stack trace filtering fo...
CVE-2024-53690
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfsrmdir. 1 Because the inode bitmap is corrupted, an inode with an inode number that should exist as a ".nilfs" file was reassigned by nilfsmkdir for "file0",...
CVE-2024-53690 nilfs2: prevent use of deleted inode
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfsrmdir. 1 Because the inode bitmap is corrupted, an inode with an inode number that should exist as a ".nilfs" file was reassigned by nilfsmkdir for "file0",...
CVE-2024-53690 nilfs2: prevent use of deleted inode
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfsrmdir. 1 Because the inode bitmap is corrupted, an inode with an inode number that should exist as a ".nilfs" file was reassigned by nilfsmkdir for "file0",...
CVE-2024-12472
The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphrduplicatepost function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-lev...
WordPress Xpro Elementor Addons plugin <= 1.4.6.2 - Authenticated (Contributor+) Post Disclosure via Post Duplication vulnerability
Authenticated Contributor+ Post Disclosure via Post Duplication vulnerability discovered by Webbernaut in WordPress Plugin Xpro Elementor Addons versions = 1.4.6.2...
WordPress Duplicate Post, Page and Any Custom Post plugin <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication vulnerability
Authenticated Contributor+ Post Disclosure via Post Duplication vulnerability discovered by Webbernaut in WordPress Plugin Duplicate Post, Page and Any Custom Post versions = 3.5.5...
PT-2025-33708
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's net/sched subsystem related to the handling of netem network emulator queuing disciplines qdiscs. The duplication prevention logic within netem...
SUSE CVE-2024-56711
In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drmmodeduplicate could return NULL due to lack of memory, which will then call NULL pointer dereference. Add a check to prevent it...
WordPress Button Block plugin <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication vulnerability
Authenticated Contributor+ Post Disclosure via Post Duplication vulnerability discovered by Webbernaut in WordPress Plugin Button Block versions = 1.1.5...
netfilter: nf_tables: prevent nf_skb_duplicated corruption
...
GHSA-7CWC-FJQM-8VH8 Drupal core Access bypass
Drupal's uniqueness checking for certain user fields is inconsistent depending on the database engine and its collation. As a result, a user may be able to register with the same email address as another user. This may lead to data integrity issues. This issue affects Drupal Core: from 8.0.0 befo...
CVE-2024-12115
The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicatepoll function. This makes it possible for unauthenticated...
PT-2024-17447 · WordPress · The Poll Maker – Versus Polls
Name of the Vulnerable Software and Affected Versions: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress versions up to, and including, 5.5.4 Description: The issue is due to missing or incorrect nonce validation on the duplicate poll function, making it possible fo...
WordPress Poll Maker plugin <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication vulnerability
Cross-Site Request Forgery to Poll Duplication vulnerability discovered by Noah Stead TurtleBurg in WordPress Plugin Poll Maker versions = 5.5.4...
QNAP Systems QTS 安全漏洞
QNAP Systems QTS is an entry-level operating system from China's Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QTS prior to version 5.2.1.2930 build 20241025 and prior to QuTS hero h5.2.1.2929 build 20241025, which stems from a buffer duplication vulnerability...
CVE-2024-53065
CVE-2024-53065 concerns the Linux kernel slab allocator (kmem_buckets_create) where a duplicate kmem_cache creation can occur on arm64 when KASAN_HW_TAGS is enabled. The initial description explains that a previous patch reduced ARCH_KMALLOC_MINALIGN to 8, which, with KASAN_HW_TAGS, makes arch_sl...
CVE-2024-50263 fork: only invoke khugepaged, ksm hooks if no error
In the Linux kernel, the following vulnerability has been resolved: fork: only invoke khugepaged, ksm hooks if no error There is no reason to invoke these hooks early against an mm that is in an incomplete state. The change in commit d24062914837 "fork: use mtdup to duplicate maple tree in dupmma...
SUSE CVE-2024-50214
In the Linux kernel, the following vulnerability has been resolved: drm/connector: hdmi: Fix memory leak in drmdisplaymodefromceavic modprobe drmconnectortest and then rmmod drmconnectortest, the following memory leak occurs. The mode allocated in drmmodeduplicate called by drmdisplaymodefromceav...