WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...

WordPress Ad Blocker Notify Lite plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ad Blocker Notify Lite plugin versions = 2.4.0. Solution No patched version available...

PT-2022-28650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.19 through v5.10.100 Description The issue is related to races around rq-rx notify masked. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v4.19 through...

PT-2022-28709

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to races around rq-rx notify masked. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.19 and fixed in Linux Kernel...

PT-2022-28593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.230 Description The issue is related to races around rq-rx notify masked. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.230,...

PT-2022-28615

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.180 Description The issue is related to races around rq-rx notify masked. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.180, upda...

PT-2025-8031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue was found in the Linux kernel's NFSv4.2 implementation, specifically in the nfs42 proc copy notify function. The issue occurs in two error paths where the...

Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify

The qualitycustomizernotifydismissaction and ticustomizernotifydismissrecommendedplugins AJAX actions names can differ depending on the theme, available to authenticated users in multiple themes do not validate or escape the id parameter before outputting it back in the response, leading to...

Multiple Themes - Reflected Cross-Site Scripting via Customizer Notify

The qualitycustomizernotifydismissaction and ticustomizernotifydismissrecommendedplugins AJAX actions names can differ depending on the theme, available to authenticated users in multiple themes do not validate or escape the id parameter before outputting it back in the response, leading to...

CLSA-2022-1643727522 Fix of CVE: CVE-2021-35942, CVE-2021-27645, CVE-2021-33574

CVE-2021-27645: nscd: Fix double free in netgroupcache 1927877 - CVE-2021-33574: Deep copy pthread attribute in mqnotify 1966472 - CVE-2021-35942: wordexp: handle overflow in positional parameter number 1979127 - librt: fix NULL pointer dereference 1966472...

PT-2022-3183

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use after free flaw in the Linux kernel's File System notify functionality, specifically in the way the copy info records to user function is called, which can...

CVE-2021-46118

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

CVE-2021-46117

jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKitdoSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code...

Jpress code injection vulnerability

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in jpress that originates from remote code execution via io.jpress.module.article.kit.ArticleNotifyKit...

PT-2021-16263

Name of the Vulnerable Software and Affected Versions: The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin versions prior to 3.0.9 Description: The issue concerns a lack of CSRF check when cleaning logs, which could allow an attacker to make a logged-in admin delete all logs via...

CVE-2021-24766: Cross-Site Request Forgery (CSRF)

The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack...

FreeSWITCH security vulnerabilities

FreeSWITCH is a free, open-source communications software program developed by Anthony Minessale, an individual developer in the United States. The software can be used to create audio, video, and SMS products and applications. A security vulnerability exists in SignalWire freeswitch, which stems...

CVE-2020-19954

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...

Xxe

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...

PT-2021-14727 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Git Plugin versions 4.8.2 and earlier Description: The issue arises from the failure to escape Git SHA-1 checksum parameters provided to commit notifications when displayed in a build cause, resulting in a stored cross-site scripting...