15544 matches found
kernel: net: fix possible store tearing in neigh_periodic_work()
A flaw was found in the Linux kernel that allows for potential store tearing within the neighperiodicwork function, meaning a write operation on a value is not protected properly and could result in inconsistencies if another process or thread reads from that value before the operation is complet...
kernel: net: fix possible store tearing in neigh_periodic_work()
A flaw was found in the Linux kernel that allows for potential store tearing within the neighperiodicwork function, meaning a write operation on a value is not protected properly and could result in inconsistencies if another process or thread reads from that value before the operation is complet...
kernel: USB: core: Fix access violation during port device removal
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disablestore: usbhubtostructhub can return NULL if the hub that the port belongs to is concurrently removed, but...
cpython: python: Memory race condition in ssl.SSLContext certificate store methods
A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...
cpython: python: Memory race condition in ssl.SSLContext certificate store methods
A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...
November 12, 2024—KB5046612 (OS Build 14393.7515)
November 12, 2024—KB5046612 OS Build 14393.7515 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Note 11/19/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an...
CVE-2024-51213
Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...
CVE-2024-51189
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the macListName1.1.1.0.0 parameter on the /filters.htm page...
CVE-2024-51788
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through = 4.3.0...
CVE-2024-51788 WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through = 4.3.0...
CVE-2024-51788 WordPress The Novel Design Store Directory plugin <= 4.3.0 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through 4.3.0...
WordPress plugin The Novel Design Store Directory code issue vulnerability
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerabilit...
CVE-2024-51190
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the ptRuleApplicationName1.1.6.0.0 parameter on the /specialap.htm page...
CVE-2024-51213
Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...
PT-2024-34555 · Trendnet · Trendnet Tew-652Brp +1
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description: The issue concerns a Store Cross-site scripting XSS vulnerability. This vulnerability can be exploited via the vsRule...
CVE-2024-51788: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through = 4.3.0...
Online Shop Store security vulnerabilities
Online Shop Store is an online store system from Online Shop Store, Inc. A security vulnerability exists in Online Shop Store v1.0, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the login.php component...
PT-2024-34558 · Trendnet · Trendnet Tew-652Brp +1
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description: The issue is related to a Store Cross-site scripting XSS vulnerability. This vulnerability can be exploited via the ptRule...
CVE-2024-51213
A Cross-Site Scripting (XSS) vulnerability exists in Online Shop Store v.1.0 , specifically within the login.php component. This flaw allows a remote attacker to achieve arbitrary code execution . To mitigate this risk, users are recommended to update to a version of the software that addresses t...