Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup PoC Put the following payload in any text field setting...

CVE-2022-2222 Download Monitor < 4.5.91 - Admin+ Arbitrary File Download

The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog folders, and not sensitive, allowing high privilege users such as admin to download the wp-config.php or /etc/passwd even in an hardened environment or multisite setup...

U.S. Dept Of Defense: Wordpress Takeover using setup configuration at http://████.edu [HtUS]

A vulnerability was found in the WordPress 'setup-config.php' installation page, which allowed a malicious user to install WordPress in a remote MySQL database without valid credentials on the target system. This could lead to remote code execution and total system compromise, as well as other...

How to Manually Configure Certificate Trust in Web Interface for NetScaler

This article describes how to import a root Certificate Authority CA into the NetScaler's trusted certificate store using the CLI. Setting up the certificate trust is necessary when deploying Web Interface for NetScaler in Gateway Direct Mode with the Authentication Point set to Access Gateway: A...

Stripo Inc: [SSRF] my.stripo.email via the setup-wizard parameter

A vulnerability in the setup wizard allowed SSRF. The issue has been resolved...

Code injection

While a user account for the IBM Spectrum Protect Server 8.1.0.000 through 8.1.14 is being established, it may be configured to use SESSIONSECURITY=TRANSITIONAL. While in this mode, it may be susceptible to an offline dictionary attack. IBM X-Force ID: 226942...

PT-2025-8546

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18 Description The issue arises in the Linux kernel when the console is enabled, and the univ8250 console setup function calls serial8250 console setup before the .dev is set to uart port. This results in pm...

GSD-2022-1004056 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1003550 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003005 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002654 um: Fix out-of-bounds read in LDT setup

um: Fix out-of-bounds read in LDT setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

gnome-initial-setup bug fix and enhancement update

An update is available for gnome-initial-setup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-initial-setup packages provide the Initial Setup...

gnome-control-center bug fix and enhancement update

An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...

PT-2022-32010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.4.197 Description A refcount leak was discovered in the clcdfb of vram setup function of the Linux Kernel. The issue was introduced in version 3.17 and is fixed in version 5.4.198. Recommendations For Linux...

PT-2022-32148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.15 through 4.19.246 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.15 through...

PT-2022-32256

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A refcount leak was discovered in the clcdfb of vram setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-32159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a refcount leak in the fsl rio setup function. It was introduced in version v3.3 and fixed in version v4.19.247. The actual impact and attack plausibility have not ye...

PT-2022-32250

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue concerns an out-of-bounds read in LDT setup. The actual impact and attack plausibility have not yet been proven. It was introduced in version v2.6.15 and fixed in version v4.14.283...

PT-2022-32264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description A refcount leak was discovered in the fsl rio setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.14.283...

PT-2022-31813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns an out-of-bounds read in LDT setup. It was introduced in version v2.6.15 and fixed in version v5.10.121. The actual impact and attack plausibility have not yet been proven...