9752 matches found
RHEL 7 : xen (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xen: rogue backends can cause DoS of guests via high frequency events CVE-2021-28713 - Rogue backends can...
RHEL 9 : xen (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xen: rogue backends can cause DoS of guests via high frequency events CVE-2021-28713 - Rogue backends can...
RHEL 8 : xen (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xen: rogue backends can cause DoS of guests via high frequency events CVE-2021-28713 - Rogue backends can...
OESA-2024-1556 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...
OESA-2024-1557 xorg-x11-server-xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information.CVE-2023-6478 A...
PT-2024-32167 · Campcodes · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been identified, affecting the /view/show events.php file. The manipulation of the event id argument leads to cross-site scripting. This...
PT-2024-32263 · Unknown · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /view/create events.php. The manipulation of the my index argument leads to...
CVE-2024-33403
A SQL injection vulnerability in /model/getevents.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the eventid parameter...
CVE-2024-3756
The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack...
CVE-2024-3756 MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF
The MF Gig Calendar WordPress plugin through 1.2.1 does not have CSRF checks in some places, which could allow attackers to make logged in Contributors and above delete arbitrary events via a CSRF attack...
PT-2024-27658 · WordPress · Mf Gig Calendar
Name of the Vulnerable Software and Affected Versions: MF Gig Calendar WordPress plugin versions 1.2.1 and earlier Description: The issue is related to the lack of CSRF checks in some places, which could allow attackers to make logged-in Contributors and above delete arbitrary events via a CSRF...
WordPress plugin MF Gig Calendar 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
SUSE CVE-2024-27030
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race condition. When two interrupts are raised to two CPUs at same time th...
SUSE CVE-2024-27067
In the Linux kernel, the following vulnerability has been resolved: xen/evtchn: avoid WARN when unbinding an event channel When unbinding a user event channel, the related handler might be called a last time in case the kernel was built with CONFIGDEBUGSHIRQ. This might cause a WARN in the handle...
Medium: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: disallow timeout for anonymous sets CVE-2023-52620 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add NULL ptr dereference checking at the end of attrallocatefra...
kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size
A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This may lead to a system crash, code execution, or local privilege escalation...
xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a...
CVE-2024-29960
creationtimestamp| type| source ---|---|--- 2024-04-27 12:40:04+00:00| seen| https://t.me/truesecator/5687 2025-02-06 02:40:49+00:00| seen| Telegram/vY5kMcnR4ofDUj2WEQTD71UKYYLP-dPqWoNgsFnCwxgbcq 2025-02-06 02:41:37+00:00| seen| Telegram/tFr-Nx35IMykN4eRIyGlC6hSvTn46ToV-LIQpcD1rix-eA3M...
