DEBIAN-CVE-2024-47794

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace. In an upcoming selftest, the attach target for entryfreplace of...

AZL-67712 CVE-2024-47794 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace. In an upcoming selftest, the attach target for entryfreplace of...

UBUNTU-CVE-2024-47794

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace. In an upcoming selftest, the attach target for entryfreplace of...

CVE-2024-47794

CVE-2024-47794 is a Linux kernel vulnerability in the BPF subsystem where a tailcall infinite loop can occur when combined with freplace. The issue arises because tail_call_cnt in entry_freplace resets to zero on every execution, preventing termination and potentially leading to a kernel panic. T...

SUSE CVE-2024-56665

In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access in perfeventdetachbpfprog Syzbot reported 1 crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to the process and set bpf progra...

SUSE CVE-2024-56675

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpfprog/attachment RCU flavors Uprobes always use bpfprogrunarrayuprobe under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF...

CVE-2024-56786

In the Linux kernel, the following vulnerability has been resolved: bpf: put bpflink's program when link is safe to be deallocated In general, BPF link's underlying BPF program should be considered to be reachable through attach hook - link - prog chain, and, pessimistically, we have to assume th...

Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CVE-2024-56786

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56786

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-56786

CVE-2024-56786 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-56786

...

CVE-2024-56786

...

CVE-2024-47934: Improper Input Validation

Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspector Pro Edition allows remote attacker to crash management service. The Denial of Service situation can be resolved by restarting the management service. This issue affects Portab...

PT-2025-2786 · Txone Networks · Txone Networks Portable Inspector +1

Name of the Vulnerable Software and Affected Versions: TXOne Networks Portable Inspector version 1.0.0 TXOne Networks Portable Inspector Pro Edition version 1.0.0 Description: The issue is related to improper input validation in the Management Program of TXOne Networks Portable Inspector and...

CVE-2024-56282

CVE-2024-56282 corresponds to a PHP Local File Inclusion in WPMozo Addons Lite for Elementor due to improper filename handling in include/require statements. The CVE entry (initial description) aligns with Red Hat's advisory and Wordfence vulnerability tracking, which confirms the affected softwa...

PT-2025-3111

Name of the Vulnerable Software and Affected Versions Asus GPU Tweak II Program Driver version 1.0.0.0 Description The issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. Recommendations...

ASUS AiCloud security vulnerability

ASUS AiCloud is a router control program from Asus China. A security vulnerability exists in ASUS AiCloud that stems from the presence of incorrect input insertion, which could lead to arbitrary command execution...

ASUS AiCloud security vulnerability

ASUS AiCloud is a router control program from Asus China. A security vulnerability exists in ASUS AiCloud. An attacker could execute arbitrary commands by exploiting the vulnerability...

Update for Adobe Flash Player: March 14, 2018

Update for Adobe Flash Player: March 14, 2018 Summary This update has been made available on a limited basis to the Insider Program. It is currently in a test phase and should only be installed on devices enrolled in the Insider Program. This article will be updated when the update is ready for...