3652 matches found
CVE-2024-11936
The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backupoptions' and 'restoreoptions' function in all versions up to, and including, 3.16.0. This makes it possible for authenticated...
SUSE CVE-2024-57891
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
DEBIAN-CVE-2024-57891
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
CVE-2024-57891
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
UBUNTU-CVE-2024-57891
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
CVE-2024-57891 sched_ext: Fix invalid irq restore in scx_ops_bypass()
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
CVE-2024-57891 sched_ext: Fix invalid irq restore in scx_ops_bypass()
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
CVE-2024-57891
The CVE refers to a Linux kernel issue fixed in the sched_ext subsystem: an invalid IRQ restore could occur due to improper conversion of an inner rq_unlock_irqrestore() to rq_unlock() when adding outer irqsave/restore locking in scx_ops_bypass(). This could lead to the IRQs being re-enabled at a...
WordPress plugin UpdraftPlus - Backup/Restore 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-3787 · WordPress · Updraftplus
Name of the Vulnerable Software and Affected Versions: UpdraftPlus: WP Backup & Migration Plugin versions up to 1.24.12 Description: The issue is related to Reflected Cross-Site Scripting XSS due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inje...
The vulnerability of the `ibk_restore_migrate_check()` function in the Super Backup & Clone plugin (WP SuperBackup) of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the ibkrestoremigratecheck function in the Super Backup & Clone plugin for WordPress’ content management system is related to the lack of restrictions on the download of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
SUSE CVE-2024-56674
In the Linux kernel, the following vulnerability has been resolved: virtionet: correct netdevtxresetqueue invocation point When virtnetclose is followed by virtnetopen, some TX completions can possibly remain unconsumed, until they are finally processed during the first NAPI poll after the...
Cross-site Scripting (XSS)
Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS by an admin user who uploads a malicious backup file using the restore functionality at the /admin/module/view?type=adminbackup endpoint. The...
SUSE CVE-2024-56775
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
DEBIAN-CVE-2024-56775
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
UBUNTU-CVE-2024-56775
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
CVE-2024-56775 drm/amd/display: Fix handling of plane refcount
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...
CVE-2024-12208
CVE-2024-12208 is a reserved candidate; however, connected documents provide concrete details for a related vulnerability: WordPress – Backup and Restore WordPress (WPBackItUp) plugin (versions up to 1.50) suffers a Cross-Site Request Forgery (CSRF) due to missing nonce validation in the ajaxQueu...
PT-2025-40084
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s kasan populate vmalloc function and its helpers did not correctly respect the caller’s gfp mask, always using GFP KERNEL instead. This inconsistency with vmalloc, whic...