2273 matches found
UBUNTU-CVE-2024-26843
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
CVE-2024-26843
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
CVE-2024-26843
In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an overflow problem in the size of the soft-reserved region...
CVE-2024-25911
CVE-2024-25911: WordPress MoveTo plugin
CVE-2023-40000
The LiteSpeed Cache plugin for WordPress (versions prior to 5.7.0.1 ) contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper input sanitization in the update_cdn_status function. Unauthenticated attackers can send a POST request to the /wp-json/litespeed/v1/cdn_status endpoint...
CVE-2023-52144
CVE-2023-52144 is a Path Traversal in the RexTheme Product Feed Manager (WordPress plugin). Connected Red Hat/ENISA/NVD entries confirm this as an Improper Limitation of a Pathname to a Restricted Directory affecting RexTheme Product Feed Manager up to version 7.3.15. The Red Hat entry notes the ...
CVE-2024-2858
The Simple Buttons Creator WordPress plugin through 1.04 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
CVE-2024-2739
The Advanced Search WordPress plugin, in versions 1.1.6 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks in certain locations. An attacker could trick a logged-in user into performing unwanted actions, specifically shortcode deletion . This vuln...
CVE-2024-1849
The WP Customer Reviews WordPress plugin (versions prior to 3.7.1 ) is vulnerable to a malicious redirect via HTTP-EQUIV injection due to insufficient parameter validation. This flaw allows users with contributor privileges or higher to redirect pages to a malicious URL, potentially exposing user...
CVE-2024-1307
The Smart Forms WordPress plugin versions prior to 2.6.94 are vulnerable to a Broken Access Control issue (A5: Broken Access Control ). The root cause is improper authorization in certain actions, which allows users with a role as low as a subscriber to perform unauthorized actions, specifically ...
CVE-2024-1310
The WooCommerce WordPress plugin (versions before 8.6 ) is vulnerable to a Broken Access Control issue that allows users with at least the Contributor role to leak products they are not authorized to access. This includes private , draft , and trashed products. The vulnerability is classified as ...
CVE-2024-1204
The Meta Box WordPress plugin (a Custom Fields Framework) versions prior to 5.9.4 are vulnerable to a Broken Access Control flaw (OWASP Top 10 A1). Users with at least the contributor role can access arbitrary custom fields assigned to posts belonging to other users. This vulnerability results in...
CVE-2024-0902
CVE-2024-0902 affects the Fancy Product Designer WordPress plugin prior to 6.1.81. Root cause: the plugin does not sanitize and escape certain settings, allowing high-privilege users (e.g., admins) to perform Stored Cross-Site Scripting even when unfiltered_html is disallowed (e.g., multisite). I...
CVE-2023-7201
The Everest Backup WordPress plugin (versions prior to 2.2.5 ) contains an Arbitrary File Upload vulnerability. The root cause is the plugin's failure to properly validate backup files during the upload process. This flaw allows high-privilege users, such as administrators , to upload arbitrary f...
CVE-2024-2583
The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin (versions before 7.0.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape certain shortcode attributes before they are echoed back to users. This flaw allows users with the contrib...