PT-2021-29493

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.11 Description The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts have been promoted to full-fledged checks in validate super. The actual impact and attack plausibility hav...

PT-2021-25422

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts have been promoted to full-fledged checks in validate super. The actual impact and attack plausibility...

PT-2021-25367

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns the btrfs filesystem in the Linux Kernel, where debugging asserts have been promoted to full-fledged checks in validate super. The actual impact and attack plausibility...

Super Progressive Web Apps < 2.1.13 - Authenticated (High Privileged) Arbitrary File Upload to RCE

When the Apple Touch Icons & Splash Screen add-on is active, its superpwasplashscreenuploader AJAX action, did not properly check for authorisation and the content of the uploaded archive file. This allows high privilege users admin+ to upload an archive with a PHP file, leading to RCE. v2.1.12...

PT-2021-25282

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.10 Description: A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-29241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.25 through 5.10.42 Description A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.25...

PT-2021-29276

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description A memory leak issue was discovered in the ext4 fill super function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25247

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.25 through 5.10.42 Description A memory leak issue was discovered in the ext4 file system. The issue is related to the ext4 fill super function. This problem was introduced in version v2.6.25 and fixed in version...

WordPress WP Super Cache Plugin < 1.7.3 Multiple Vulnerabilities

The WordPress plugin Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

File upload vulnerability exists in super cms (CNVD-2021-46845)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

Annex Cloud Loyalty Experience Platform 安全漏洞

Loyalty Experience Platform is Annex Cloud's platform that combines best-in-class program management capabilities with powerful engagement modules A security vulnerability exists in Annex Cloud Loyalty Experience Platform versions prior to 2021.1.0.1 that can be exploited by an attacker to escala...

PT-2024-11273 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the Linux kernel when a gadget driver calls usb assign descriptors with a NULL descriptor for super-speed-plus and is then used on...

[20210704] - Core - Privilege escalation through com_installer

Install action in cominstaller lack the required hardcoded ACL checks for superusers, leading to various potential attack vectors. A default system is not affected cause by default cominstaller is limited to super users already...

CVE-2021-1538

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

CVE-2021-1538 Cisco Common Services Platform Collector Command Injection Vulnerability

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

Cisco Common Services Platform Collector Command Injection Vulnerability

The Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on a network. A command injection vulnerability exists in the configuration dashboard of Cisco Common Services Platform Collector versions prior to 2.9.1. T...

CVE-2021-1538

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

CVE-2021-24329

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wpcachelocation parameter in its settings, which could lead to a Stored Cross-Site Scripting issue...

CVE-2021-24329

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wpcachelocation parameter in its settings, which could lead to a Stored Cross-Site Scripting issue...

CVE-2021-24312

The parameters $cachepath, $wpcachedebugip, $wpsupercachefrontpagetext, $cachescheduledtime, $cacheddirectpages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209...