WordPress Plugin chronosly-events-calendar Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin...

PT-2023-23149 · Unknown · Chronosly Events Calendar

Name of the Vulnerable Software and Affected Versions: Chronosly Events Calendar plugin versions = 2.6.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

kernel: drm/amdkfd: Fix an illegal memory access

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

CVE-2023-38547

creationtimestamp| type| source ---|---|--- 2023-11-07 06:30:59+00:00| seen| https://t.me/KomunitiSiber/1033 2023-11-07 07:17:43+00:00| seen| Telegram/sEqbKLGxSNqwfQkozcbXznYuS4esISD7umc3F1o2oSNAqg 2023-11-07 16:20:06+00:00| seen| https://t.me/truesecator/5055...

Rocky Linux 8 : firefox (RLSA-2022:8554)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8554 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined wi...

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

...

Design/Logic Flaw

In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" facebookconversiontrackingplus up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from...

CVE-2023-46352

In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" facebookconversiontrackingplus up to version 2.4.9 from Smart Modules for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can access exports from...

CVE-2023-1718

creationtimestamp| type| source ---|---|--- 2023-11-01 13:21:39+00:00| seen| https://t.me/cibsecurity/73304 2023-11-04 17:44:37+00:00| seen| Telegram/993IQTAEI9abMkOWl8mkHJFNRp2-d18TbGN-UxF0pN3nA 2023-11-04 22:44:13+00:00| seen| https://t.me/poxek/3380 2023-11-04 23:56:08+00:00| seen|...

The vulnerability of the Arena Simulation software in modeling and automating discrete events lies in its ability to overflow a buffer based on a queue. This allows a hacker to execute arbitrary code.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-21365

creationtimestamp| type| source ---|---|--- 2023-10-30 19:19:53+00:00| seen| https://t.me/cibsecurity/73146 2025-08-09 11:56:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lvxpkudv2po2 2025-08-09 12:14:28+00:00| seen|...

CVE-2023-5717

A flaw was found in the Linux kernel's Performance Events system component. A condition can be triggered that allows data to be written past the end or before the beginning of the intended memory buffer. This issue may lead to a system crash, code execution, or local privilege escalation...

CVE-2023-46604

creationtimestamp| type| source ---|---|--- 2023-10-27 18:17:07+00:00| seen| https://t.me/cibsecurity/73057 2023-11-01 20:42:27+00:00| seen| MISP/f9c19fe0-d99a-4345-8423-5635b5d8bf1f 2023-11-02 05:37:58+00:00| exploited| https://t.me/thehackernews/4088 2023-11-02 06:01:02+00:00|...

CVE-2023-44220

creationtimestamp| type| source ---|---|--- 2023-10-27 12:17:06+00:00| seen| https://t.me/cibsecurity/73043 2023-10-27 14:29:11+00:00| seen| Telegram/0SxH4tw6YHDiUMfTdromdLOD9exOvD8SKMRLPkFsdv2X9A 2023-10-27 14:30:17+00:00| seen| Telegram/DXaxxkSypkGKlCLEBvcXLI7eHXWMhM1RekQ2WXJiiLVQ 2023-10-27...

SUSE CVE-2023-5717

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events perf component can be exploited to achieve local privilege escalation. If perfreadgroup is called while an event's siblinglist is smaller than its child's siblinglist, it can increment or write to memor...

The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component of the Oracle PeopleSoft Products allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...

CVE-2023-37679

creationtimestamp| type| source ---|---|--- 2023-10-26 20:16:00+00:00| seen| https://t.me/cibsecurity/72981 2023-12-11 01:22:38+00:00| seen| https://t.me/arpsyndicate/1685 2024-01-30 16:05:09+00:00| seen|...

CVE-2023-46667 Fleet Server Insertion of Sensitive Information into Log File

An issue was discovered in Fleet Server = v8.10.0 and v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in th...

CVE-2023-46667

Fleet Server vulnerability CVE-2023-46667 affects Fleet Server 8.10.0–8.10.2 where enrolment tokens are written in plaintext to log files, potentially enabling unauthorized agent enrolment and access to secrets (Elasticsearch and third‑party services) or arbitrary events. Exploitation is not desc...

CVE-2022-4886

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:16+00:00| seen| https://t.me/cibsecurity/72908 2023-10-30 08:13:06+00:00| seen| Telegram/MCOtq6YNws1wIQDmkmW4fj5yPvTPQ5hjf1qfUTkU-awDNw 2023-10-30 09:02:14+00:00| seen| https://t.me/KomunitiSiber/999 2023-10-30 17:00:07+00:00| seen|...