266 matches found
CVE-2024-11197 Lock User Account <= 1.0.5 - User Lock Bypass
The Lock User Account plugin for WordPress is vulnerable to user lock bypass in all versions up to, and including, 1.0.5. This is due to permitting application password logins when user accounts are locked. This makes it possible for authenticated attackers, with existing application passwords, t...
CVE-2024-11197 Lock User Account <= 1.0.5 - User Lock Bypass
The Lock User Account plugin for WordPress is vulnerable to user lock bypass in all versions up to, and including, 1.0.5. This is due to permitting application password logins when user accounts are locked. This makes it possible for authenticated attackers, with existing application passwords, t...
CVE-2024-11197
CVE-2024-11197 : The WordPress plugin Lock User Account (versions
WordPress Lock User Account plugin <= 1.0.5 - User Lock Bypass vulnerability
User Lock Bypass vulnerability discovered by Francesco Carlucci in WordPress Plugin Lock User Account versions = 1.0.5...
The vulnerability of the mhi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the mhi component in the Linux operating system’s kernel is related to the bypassing of a lock mechanism before entering the buffer queue. Exploiting this vulnerability can allow an attacker to cause a service failure...
HPESBCR04683 rev.1 - Certain HPE Cray and ProLiant XL Servers Using Certain AMD EPYC Processors, AMD-SB-7014: SMM Lock Bypass, Local Arbitrary Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade - Prior to v1.9.0 HFP 24.9 HPE Cray EX235n Server - Prior to v1.5.0 HFP 24.9 HPE Cray EX255a Accelerator Blade - Prior to v1.1.0 HFP 24.8.1...
GHSA-GC7Q-JGJV-VJR2 Keycloak Services has a potential bypass of brute force protection
If an attacker launches many login attempts in parallel then the attacker can have more guesses at a password than the brute force protection configuration permits. This is due to the brute force check occurring before the brute force protector has locked the user. Acknowledgements: Special thank...
hw: amd: SMM Lock Bypass
A flaw was found in hw. Improper validation in a model-specific register MSR could allow a malicious program with ring0 access to modify the SMM configuration while the SMI lock is enabled. This issue can lead to arbitrary code execution...
Important: Red Hat Security Advisory: linux-firmware security update
An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: linux-firmware security update
An update for linux-firmware is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
RHEL 7 : linux-firmware (RHSA-2024:5982)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5982 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: amd: SMM Lock Bypa...
RHEL 9 : linux-firmware (RHSA-2024:5980)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5980 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: amd: SMM Lock Bypa...
AMD SPI Lock Bypass Vulnerability - Lenovo Support US
No description provided...
AMD SPI Lock Bypass Vulnerability - Lenovo Support US
No description provided...
AMD SPI Lock Bypass June 2024 Security Update
AMD has informed HP of a potential weakness in AMD SPI protection features, which might allow arbitrary code execution. AMD is releasing firmware updates and HP is enabling AMD ROM Armor to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has...
CVE-2024-32131 WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82...
CVE-2024-32131 WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functionality Bypass.This issue affects Download Manager: from n/a through 3.2.82...
CVE-2024-31747
An issue in Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 fixed in 122.15.0.142 allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option...
CVE-2024-31747
Vulnerability: Yealink VP59 Microsoft Teams Phone firmware 91.15.0.118 is affected by CVE-2024-31747; a physically proximate attacker can disable the phone lock via the Walkie Talkie menu option. Root cause: unauthenticated action within the device UI enables lock disablement (no exploitation det...