15689 matches found
D-Link DI-7003G 访问控制错误漏洞
The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /H5/getversion.data, which can be exploited by an attacker to cause information disclosure...
CVE-2024-6584
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584 Jetpack Boost < 3.4.7 - Admin+ SSRF
The 'wpajaxboostproxyig' action allows administrators to make GET requests to arbitrary URLs...
CVE-2024-6584
CVE-2024-6584 describes an SSRF issue in WordPress Jetpack Boost where the action wp_ajax_boost_proxy_ig lets administrators make GET requests to arbitrary URLs. Public details in connected docs associate this with a WordPress Jetpack Boost vulnerability (Admin+ SSRF) and indicate a fix in Jetpac...
PT-2025-21484 · Git +1 · Jetpack +1
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows administrators to make GET requests to arbitrary URLs through the 'wp ajax boost proxy ig' action. Recommendations: At the moment, there is no information about a newer...
WordPress plugin Jetpack Boost 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
AZL-61888 CVE-2025-46836 affecting package net-tools for versions less than 2.10-4
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
UBUNTU-CVE-2025-46836
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...
kernel: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: Add encoder check in intelhdcpgetcapability Sometimes during hotplug scenario or suspend/resume scenario encoder is not always initialized when intelhdcpgetcapability add a check to avoid kernel null pointer...
kernel: tpm: Lock TPM chip in tpm_pm_suspend() first
In the Linux kernel, the following vulnerability has been resolved: tpm: Lock TPM chip in tpmpmsuspend first Setting TPMCHIPFLAGSUSPENDED in the end of tpmpmsuspend can be racy according, as this leaves window for tpmhwrngread to be called while the operation is in progress. The recent bug report...
kernel: powercap: intel_rapl: Fix off by one in get_rpi()
In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix off by one in getrpi The rp-priv-rpi array is either rpimsr or rpitpmi which have NRRAPLPRIMITIVES number of elements. Thus the needs to be = to prevent an off by one access...
kernel: thermal: core: Reference count the zone in thermal_zone_get_by_id()
In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermalzonegetbyid There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has been returned by...
kernel: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .gettxpower Avoid potentially crashing in the driver because of uninitialized private data...
kernel: nfsd: call cache_put if xdr_reserve_space returns NULL
In the Linux kernel, the following vulnerability has been resolved: nfsd: call cacheput if xdrreservespace returns NULL If not enough buffer space available, but idmaplookup has triggered lookupfn which calls cacheget and returns successfully. Then we missed to call cacheput here which pairs with...
kernel: lib/fonts: fix undefined behavior in bit shift for get_default_font
In the Linux kernel, the following vulnerability has been resolved: lib/fonts: fix undefined behavior in bit shift for getdefaultfont Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds i...
CVE-2024-56523
Radware Cloud Web Application Firewall WAF before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method...
CVE-2024-56523
Radware Cloud Web Application Firewall WAF before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method...
CVE-2024-56523
Radware Cloud Web Application Firewall WAF before 2025-05-07 allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method...
CVE-2024-56523
Summary: CVE-2024-56523 affects Radware Cloud Web Application Firewall (WAF). The vulnerability allows remote attackers to bypass firewall filters by placing random data in the HTTP request body when using the HTTP GET method, potentially enabling malicious inputs to reach the underlying web appl...
