CVE-2024-50069

The CVE-2024-50069 entry concerns the Linux kernel pinctrl: apple subsystem. Root cause: devm_kasprintf() could return NULL on failure, but the return value was not checked. The fix adds a check of the returned pointer to prevent NULL dereference. Impact described as high availability risk in aff...

CVE-2024-9607

The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.2.9. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i...

CVE-2024-9607

The CVE CVE-2024-9607 affects the WordPress plugin 10Web Social Post Feed (versions

PT-2024-39713 · 10Web · 10Web Social Post Feed

Name of the Vulnerable Software and Affected Versions: 10Web Social Post Feed plugin for WordPress versions up to, and including, 1.2.9 Description: The issue arises from the use of add query arg without proper escaping on the URL, leading to Reflected Cross-Site Scripting. This allows...

Lawo AG vsm LTC Time Sync Path Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Path Traversal Vulnerability product: Lawo AG - vsm LTC Time Sync vTimeSync vulnerable version: 4.5.6.0 fixed version: 4.5.6.0 CVE number: CVE-2024-6049...

The Snowflake Connector for Python stores sensitive data in logs

Issue Snowflake recently learned about and remediated a set of vulnerabilities in the Snowflake Connector for Python. Under specific conditions, certain users credentials or portions of those credentials were logged locally by the Connector to the users own systems. The credentials were not logge...

CVE-2024-49750

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the logging level was set by the user to DEBUG, the Connector could have logged Duo passcodes when specified...

PYSEC-2024-191

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the logging level was set by the user to DEBUG, the Connector could have logged Duo passcodes when specified...

ICE's $2 Million Contract With a Spyware Vendor Is Under White House Review

Immigration and Customs Enforcement's contract with Paragon Solutions faces scrutiny over whether it complies with the Biden administration's executive order on spyware, WIRED has learned...

AZL-50649 CVE-2024-47681 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996mcustabferhe Fix the NULL pointer dereference in mt7996mcustabferhe routine adding an sta interface to the mt7996 driver. Found by code review...

CVE-2024-47681

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996mcustabferhe Fix the NULL pointer dereference in mt7996mcustabferhe routine adding an sta interface to the mt7996 driver. Found by code review...

CVE-2024-47681 wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996mcustabferhe Fix the NULL pointer dereference in mt7996mcustabferhe routine adding an sta interface to the mt7996 driver. Found by code review...

CVE-2024-47681 wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix NULL pointer dereference in mt7996mcustabferhe Fix the NULL pointer dereference in mt7996mcustabferhe routine adding an sta interface to the mt7996 driver. Found by code review...

CVE-2024-47681

CVE-2024-47681 concerns the Linux kernel wifi driver for the mt76 MT7996. The issue is a NULL pointer dereference in the mt7996_mcu_sta_bfer_he routine when adding an STA interface to the MT7996 driver. The description indicates the vulnerability is resolved by fixing the NULL pointer dereference...

CVE-2017-6199

creationtimestamp| type| source ---|---|--- 2024-10-18 16:25:52+00:00| seen| https://t.me/CyberSecurityTechnologies/858...

Oracle Critical Patch Update, October 2024 Security Update Review

Oracle released the last quarterly edition of this year’s Critical Patch Update. The update contains patches for 334 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families,...

CVE-2024-8541

The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.6.5. Th...

WordPress plugin Rich Review 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-39082 · WordPress · Discount Rules For Woocommerce

Name of the Vulnerable Software and Affected Versions: The Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons plugin for WordPress versions up to, and including, 2.6.5 Description: The issue is related to Reflected Cross-Site Scripting due t...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46685)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46685 advisory. - In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL...