WordPress Restaurant & Cafe Addon for Elementor Plugin <= 1.5.9 is vulnerable to Broken Access Control

Software Restaurant & Cafe Addon for Elementor Type Plugin Vulnerable versions = 1.5.9 Fixed in 1.6.0 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10780 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

The vulnerabilities of Linux operating system’s x86/tdx kernel components allow attackers to cause service failures.

The vulnerability of x86/tdx components of the Linux operating system’s kernel is related to the operation of transferring data beyond the buffer in the memory area within the SYMFUNCEND function. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the Apache Tomcat application server, related to unvalidated error states, allows attackers to bypass authentication processes and cause service failures.

The vulnerability of the Apache Tomcat application server is related to an unvalidated error condition. Exploiting this vulnerability allows a malicious actor to bypass authentication processes and cause service failures...

The vulnerability of the aiohttp HTTP client lies in the fact that resources are not released after their useful period has ended, allowing attackers to trigger service failures.

The vulnerability of the aiohttp HTTP client is related to the failure to release resources after their useful period has expired. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of Siemens SINEMA Remote Connect arises from the use of incorrect authentication tokens due to unlimited distribution of resources, which can lead to service failures.

The vulnerability of Siemens SINEMA Remote Connect relates to the use of incorrect authentication tokens due to unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family (including S615, MUM-800, and RM1224) is related to improper access control, which allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family including S615, MUM-800, and RM1224 is related to improper access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the blk-mq component in Linux operating system kernels allows a hacker to trigger a service failure.

The vulnerabilities of the functions blkmqgetnewrequests, blkmqgetcachedrequest, and blkmqsubmitbio in the Linux operating system’s blk-mq component are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

WordPress AppPresser Plugin <= 4.4.6 is vulnerable to Privilege Escalation

Software AppPresser Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-11024 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 25ae1391ba68 Credits shaman0x01...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) relates to the implementation or modification of arguments, allowing a perpetrator to cause a service failure.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor to cause service failures by rewriting confidential files or...

WordPress Social Login Plugin <= 5.9.0 is vulnerable to Privilege Escalation

Software Social Login Type Plugin Vulnerable versions = 5.9.0 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-10961 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 284fa6881d99 Credits wesley wcraf...

WordPress Button Block Plugin <= 1.1.4 is vulnerable to Broken Authentication

Software Button Block Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-10671 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID ae07da220d1c Credits...

WordPress Easy Twitter Feed Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software Easy Twitter Feed Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10666 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7120bb84b17b Credits Francesc...

WordPress Theme Builder For Elementor Plugin <= 1.2.2 is vulnerable to Broken Access Control

Software Theme Builder For Elementor Type Plugin Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10782 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 266b574a3c97...

The vulnerability of DRM/AST components in Linux operating systems allows a perpetrator to trigger a service failure.

The vulnerability of DRM/ast components in Linux operating systems is related to improper locking of resources in the astdpsetonoff function. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the mptcp component in Linux kernel, which allows a hacker to cause a service failure

The vulnerability of the mptcp component in Linux operating systems is related to inadequate access restrictions. Exploiting this vulnerability can allow attackers to cause service failures...

WordPress Tutor LMS Plugin <= 2.7.6 is vulnerable to Broken Access Control

Software Tutor LMS Type Plugin Vulnerable versions = 2.7.6 Fixed in 2.7.7 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2024-10393 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 196d31d95c65 Credits 1337Wannabe...

Vulnerabilities of PCI/PM components in the Linux operating system’s kernel, allowing attackers to trigger service failures

The vulnerability of the PCI/PM components in the Linux operating system’s kernel is related to improper error handling in the function pcideviceremove. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xen/evtchn components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the xen/evtchn components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mm/secretmem components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm/secretmem components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

DEBIAN-CVE-2024-50290

In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that...