CVE-2024-50231 iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()

In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks in iiogtsbuildavailscaletable modprobe iio-test-gts and rmmod it, then the following memory leak occurs: unreferenced object 0xffffff80c810be00 size 64: comm "kunittrycatch", pid 1654, jiffies...

CVE-2024-50231

CVE-2024-50231 affects the Linux kernel’s IIO subsystem (gts helper). The issue is a memory-leak in iio_gts_build_avail_scale_table() where per_time_gains elements/arrays are not freed, triggered when running iio-test-gts tests (gts_test_gains, gts_test_itimes). The leak manifests as unreferenced...

CVE-2024-50231 iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()

In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks in iiogtsbuildavailscaletable modprobe iio-test-gts and rmmod it, then the following memory leak occurs: unreferenced object 0xffffff80c810be00 size 64: comm "kunittrycatch", pid 1654, jiffies...

CVE-2024-50231

In the Linux kernel, the following vulnerability has been resolved: iio: gts-helper: Fix memory leaks in iiogtsbuildavailscaletable modprobe iio-test-gts and rmmod it, then the following memory leak occurs: unreferenced object 0xffffff80c810be00 size 64: comm "kunittrycatch", pid 1654, jiffies...

CVE-2024-10676 WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Conversion Helper conversion-helper allows Reflected XSS.This issue affects Conversion Helper: from n/a through = 1.12...

CVE-2024-10676

CVE-2024-10676 describes a Reflected XSS in the WordPress plugin Conversion Helper (Wojciech Borowicz). The vulnerability arises from improper input neutralization during web page generation, allowing attacker-supplied input to be reflected in the page. Affected software: Conversion Helper, versi...

CVE-2024-10676 WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wojciechborowicz Conversion Helper conversion-helper allows Reflected XSS.This issue affects Conversion Helper: from n/a through = 1.12...

bpf: Fix helper writes to read-only maps

...

WordPress plugin Conversion Helper 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16453 · Unknown · Wojciech Borowicz Conversion Helper

Name of the Vulnerable Software and Affected Versions: Wojciech Borowicz Conversion Helper versions n/a through 1.12 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

SUSE CVE-2024-50164

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEMUNINIT's meaning Lonial reported an issue in the BPF verifier where checkmemsizereg has the following code: if !tnumisconstreg-varoff / For unprivileged variable accesses, disable raw mode so that the...

MAL-2024-10481 Malicious code in cs-deploy-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc924b01d9d1492c726482e9cfb4985b29cfd9c8771d907af44c2d7351d1ff36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-deploy-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc924b01d9d1492c726482e9cfb4985b29cfd9c8771d907af44c2d7351d1ff36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kernel: padata: Fix possible divide-by-0 panic in padata_mt_helper()

A denial of service vulnerability exists in the Linux kernel. A possible divide-by-0 is in the padatamthelper function when the ps-chunksize is 0. This vulnerability could result in a loss of system availability...

kernel: padata: Fix possible divide-by-0 panic in padata_mt_helper()

A denial of service vulnerability exists in the Linux kernel. A possible divide-by-0 is in the padatamthelper function when the ps-chunksize is 0. This vulnerability could result in a loss of system availability...

WordPress Conversion Helper plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Conversion Helper versions = 1.12...

WordPress Conversion Helper Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)

Software Conversion Helper Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-10676 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 008d9a851e15 Credits João Pedro S Alcântara Kinorth...

CVE-2024-37926

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...

CVE-2024-37926

CVE-2024-37926 describes a Missing Authorization vulnerability in the WordPress plugin WP Accessibility Helper (WAH) that allows accessing functionality not properly constrained by ACLs. The issue affects WAH versions from n/a up through 0.6.2.9. The initial documents do not provide a remediation...

CVE-2024-37926 WordPress WP Accessibility Helper (WAH) plugin <= 0.6.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper WAH allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper WAH: from n/a through 0.6.2.9...