AZL-52902 CVE-2024-49938 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for resetting urb before resubmit Syzbot points out that skbtrim has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly ju...

WordPress DocumentPress plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin DocumentPress versions = 2.1...

HikaShop Joomla Component 跨站脚本漏洞

HikaShop Joomla Component is an e-commerce component from HikaShop that is used in the Joomla content management system. A security vulnerability exists in HikaShop Joomla Component versions prior to 5.1.1, which stems from vulnerability to a stored cross-site scripting attack that allows a remot...

WordPress Logo Slider plugin < 4.1.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Logo Slider versions 4.1.0...

PT-2024-33384 · Unknown · Ajax Rating With Custom Login

Name of the Vulnerable Software and Affected Versions: Ajax Rating with Custom Login versions n/a through 1.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, posing...

ESP-IDF 安全漏洞

ESP-IDF is an Espressif open source development framework for Espressif SoCs supported on Windows, Linux and macOS. A security vulnerability exists in ESP-IDF version v.5.1, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to obtain sensitive...

WordPress plugin Mapplic and Mapplic Lite 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2024-21270

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Tasks. Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common...

Splunk Enterprise 安全漏洞

Splunk Enterprise is a suite of data collection and analytics software from Splunk, Inc. in the United States. A security vulnerability exists in Splunk Enterprise versions 9.2.x prior to 9.2.3 and 9.1.x prior to 9.1.6, which stems from a low-privileged user being able to view an image on a...

eLabFTW 代码注入漏洞

eLabFTW is an open source experimental data hosting platform from eLabFTW Open Source. The platform runs on Linux and supports storing a wide range of objects. A code injection vulnerability exists in eLabFTW versions prior to 5.1.5. An attacker can exploit this vulnerability to execute arbitrary...

WordPress Keep Backup Daily plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Keep Backup Daily versions = 2.1.1...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony 4.1.0 and earlier versions, which originates from a local attacker who can cause a denial of service via incorrect inp...

WordPress SEOPress plugin <= 8.1.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin SEOPress versions = 8.1.1...

Open Solutions For Education OpenSis-Classic 安全漏洞

Open Solutions For Education OpenSis-Classic is an open source commercial-grade, secure, scalable and intuitive student information system, school management software from Open Solutions For Education, USA. A security vulnerability exists in Open Solutions For Education OpenSis-Classic v9.1. An...

PT-2024-21052 · Elabftw · Elabftw

Name of the Vulnerable Software and Affected Versions: eLabFTW versions prior to 5.1.0 Description: The issue allows a regular user to become an administrator of a team where they are a member, under a reasonable configuration. In versions subsequent to v5.0.0, it may also allow an initially...

Bluetooth Core Specification 安全漏洞

The Bluetooth Core Specification is a specification for Bluetooth. It defines the technical building blocks used by developers to create the interoperable devices that make up the thriving Bluetooth ecosystem. Overseen by the Bluetooth Special Interest Group SIG and regularly updated and enhanced...

WordPress plugin AI Chatbot with ChatGPT by AYS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin AI Chatbot...

WordPress plugin OSM – OpenStreetMap 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-29405 · Mdflib · Mdflib

Name of the Vulnerable Software and Affected Versions: Library MDF mdflib version 2.1 Description: The issue is a heap-based buffer overread that occurs when a crafted mdf4 file is parsed using the ReadData function. This can be exploited via a crafted mdf4 file. Recommendations: For version 2.1,...

Library MDF 安全漏洞

Library MDF mdflib is a codebase by the individual developer Ingemar Hedvall. A security vulnerability exists in Library MDF version v2.1, which stems from vulnerability to heap-based buffer overwrite attacks...