11860 matches found
LearnPress – WordPress LMS Plugin < 4.2.6.6 - Unauthenticated Bypass to User Registration
Description The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to bypass to user registration in versions up to, and including, 4.2.6.5. This is due to missing checks in the 'createaccount' function in the checkout. This makes it possible for unauthenticated attackers to...
CVE-2024-33382
An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration...
PT-2024-25225 · Open5Gs · Open5Gs
Name of the Vulnerable Software and Affected Versions: Open5GS version 2.7.0 Description: An issue in Open5GS allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration. Recommendations: For Open5GS version 2.7.0, at the moment, there is no information about a new...
CVE-2024-33382
An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration...
CVE-2024-33382
An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration...
CVE-2024-33382
An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration...
Open5GS 安全漏洞
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited by an attacker to cause a denial of service via 64 unsuccessful UE/gnb registrations...
CVE-2024-33382
Open5GS v2.7.0 is affected by a denial-of-service issue described as a DoS via 64 unsuccessful UE/gnb registrations. The vulnerability affects the Open5GS 5G Core/EPC implementation as reported in multiple sources; root cause details are not provided in the documents, and there is no explicit exp...
AJAX Login and Registration modal popup + inline form <= 2.23 - Authenticated (Author+) Stored Cross-Site Scripting
Description The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
The vulnerability of the PostgreSQL software component used in Brocade SANnav network management systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the PostgreSQL software component used in Brocade SANnav network management systems is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when sound model data is copied from the user to a kernel buffer during sound model registration...
CVE-2024-34469
Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...
CVE-2024-34469
Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...
SUSE CVE-2024-27039
In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: Fix an erroneous devmkfree 'pclk' is an array allocated just before the for loop for all clk that need to be registered. It is incremented at each loop iteration. If a clkregister call fails, 'pclk' may...
SUSE CVE-2024-27043
In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, pdvbdev is not set to NULL after dvbdev's deallocation, causing...
SUSE CVE-2024-27073
In the Linux kernel, the following vulnerability has been resolved: media: ttpci: fix two memleaks in budgetavattach When saa7146registerdevice and saa7146vvinit fails, budgetavattach should free the resources it allocates, like the error-handling of ttpcibudgetinit does. Besides, there are two...
CVE-2024-34473
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...
CVE-2024-34469
Rukovoditel prior to version 3.5.3 is vulnerable to cross-site scripting via the user_photo parameter in index.php?module=users/registration&action=save. The root cause is improper handling/validation of the user_photo input, allowing injected scripts to execute. Affected product: Rukovoditel web...
CVE-2024-34473
CVE-2024-34473 affects the appmgr component of the O-RAN Near-RT RIC I-Release. The root cause is that an attacker could register an unintended RMR message type during xApp registration, which can disrupt other service components. The available documents describe the vulnerability and impact but ...