4756 matches found
WordPress User Meta Plugin <= 3.0 is vulnerable to Sensitive Data Exposure
Software User Meta Type Plugin Vulnerable versions = 3.0 Fixed in 3.1 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2024-33575 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5ef2082a8275 Credits stealthcopter Required privilege...
Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases
European Police Chiefs said that the complementary partnership between law enforcement agencies and the technology industry is at risk due to end-to-end encryption E2EE. They called on the industry and governments to take urgent action to ensure public safety across social media platforms. "Priva...
SUSE CVE-2024-26869
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
memos 安全漏洞
memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos version 0.13.2, which stems from /o/get/httpmeta allows unauthenticated users to enumerate the internal network and receive limited html values in the form of json...
SUSE-SU-2024:1345-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-24549: Fixed denial of service during header validation for HTTP/2 stream bsc1221386 - CVE-2024-23672: Fixed denial of service due to malicious WebSocket client keeping connection open bsc1221385 Other fixes: - Update to Tomcat 9.0.87...
WordPress Newspaper theme <= 12.6.5 - Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability
Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability discovered by István Márton in WordPress Theme Newspaper versions = 12.6.5...
WordPress tagDiv Composer plugin <= 4.8 - Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability
Authenticated Stored Cross-Site Scripting via Attachment Meta vulnerability discovered by István Márton in WordPress Plugin tagDiv Composer versions = 4.8...
PT-2024-15121 · WordPress · Ean For Woocommerce
Name of the Vulnerable Software and Affected Versions: EAN for WooCommerce plugin for WordPress versions up to, and including, 4.9.2 Description: The issue allows authenticated attackers with contributor-level access and above to expose potentially sensitive post metadata due to missing validatio...
CVE-2024-26869
A vulnerability was found in the f2fs component in the Linux kernel, where a race condition can be created between the garbage collection thread and the f2fsinplacewritedata thread. This could lead to data corruption or system instability. Mitigation Mitigation for this issue is either not...
AZL-61721 CVE-2024-26869 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
DEBIAN-CVE-2024-26869
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
UBUNTU-CVE-2024-26869
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
CVE-2024-26869
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
CVE-2024-26869 f2fs: fix to truncate meta inode pages forcely
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
CVE-2024-26869
CVE-2024-26869 affects the Linux kernel in the f2fs subsystem. The root cause is a race in invalidating meta inode pages during GC, which can cause data corruption. The fix replaces invalidate_mapping_pages() with truncate_inode_pages_range() to ensure meta_inode pages are dropped safely. Several...
CVE-2024-26869 f2fs: fix to truncate meta inode pages forcely
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
CVE-2024-26869
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate meta inode pages forcely Below race case can cause data corruption: Thread A GC thread - gcdatasegment - radatablock - locked metainode page - f2fsinplacewritedata - invalidatemappingpages : fail to invalida...
WordPress WP Meta SEO plugin <= 4.5.12 - Information Exposure via Meta Description vulnerability
Information Exposure via Meta Description vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Meta SEO versions = 4.5.12...
WordPress WP Meta SEO plugin <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header vulnerability
Unauthenticated Stored Cross-Site Scripting via Referer header vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Meta SEO versions = 4.5.12...
