8334 matches found
UBUNTU-CVE-2024-57931
In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG. This commit ensures that future permissions can be added without interfering with older kernels...
CVE-2024-57931
In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG. This commit ensures that future permissions can be added without interfering with older kernels...
CVE-2024-57931: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: selinux: ignore unknown extended permissions When evaluating extended permissions, ignore unknown permissions instead of calling BUG. This commit ensures that future permissions can be added without interfering with older kernels...
Linux kernel code vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in Linux kernel that stems from the btrfs module failing to check the validity of the extended tree during a scrub operation. This could resul...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the selinux module not ignoring unknown permissions when handling extended permissions. This could lead to syste...
Malicious code in vuepress-reading-time-extended (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc2173cdec2761003cb14e94e23dc4759392b467f4f45b62ec5afd7c2353d96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-13184: Improper Neutralization of Special Elements used in an SQL Command
The The Ultimate WordPress Toolkit â WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...
WordPress plugin WP Extended has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
OESA-2025-1050 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability affects...
WordPress TinyMCE Extended Config plugin <= 0.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin TinyMCE Extended Config versions = 0.1.0...
Mozilla Firefox Thunderbird Clickjacking
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper storage of permissions. Exploiting this vulnerability can allow a remote attacker to carry out a clickjacking attack...
KLA90885 PE vulnerability in Microsoft Products (ESU)
An elevation of privilege vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-21325 Exploitation Related products Microsoft-Windows Microsoft-Windows-10 Microsoft-Windows-11 CVE lis...
CVE-2024-55945 Cross-Site Request Forgery in DB Check Module in TYPO3
TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...
CVE-2025-21295
SPNEGO Extended Negotiation NEGOEX Security Mechanism Remote Code Execution Vulnerability...
CVE-2025-21295 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
...
January 14, 2025-Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 (KB5050181)
None None...
January 14, 2025-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 (KB5050180)
None None...
KB5049994: Cumulative security update for Internet Explorer: January 14, 2025
None None...