PT-2021-26455

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30520

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26432

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.253 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26392

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.290 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-30632

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.5 through 5.14 Description A potential memory leak issue was discovered in the ptp clock register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5...

PT-2021-26589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26568

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.14.15 Description A potential memory leak issue was identified in the ptp clock register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30450

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description A memory leak issue was discovered in the mdiobus register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26637

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.5 through 5.14 Description: A potential memory leak issue was discovered in the ptp clock register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel version...

PT-2021-30563

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A potential memory leak issue was discovered in the ptp clock register function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

WordPress Pie Register Plugin Authorization Issues Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the WordPress Pie Register plugin prior to version 3.7.1.6, whi...

CVE-2021-24731 Pie Register < 3.7.1.6 - Unauthenticated SQL Injection

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection...

CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or userna...

WordPress 插件授权问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the WordPress Pie Register plugin prior to version 3.7.1.6, whi...

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

CVE-2021-39416

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

PT-2021-22583

Name of the Vulnerable Software and Affected Versions: Remote Clinic version 2.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in Remote Clinic v2.0. The vulnerabilities are found in several parameters across different PHP files, including patients/register-patient.php via...

CVE-2021-39416: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exists in Remote Clinic v2.0 in 1 patients/register-patient.php via the a Contact, b Email, c Weight, d Profession, e refcontact, f address, g gender, h age, and i serial parameters; in 2 patients/edit-patient.php via the a Contact, b Email, c...

Publify `guest` role users can self-register even when the admin does not allow it

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. guest role users can self-register even when the admin does not allow it. This happens due to front-end restriction only...

GHSA-X24J-87X9-JVV5 Publify `guest` role users can self-register even when the admin does not allow it

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. guest role users can self-register even when the admin does not allow it. This happens due to front-end restriction only...