CVE-2024-50252 mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changing the remote address of an ip6gre net...

CVE-2024-50231

CVE-2024-50231 affects the Linux kernel’s IIO subsystem (gts helper). The issue is a memory-leak in iio_gts_build_avail_scale_table() where per_time_gains elements/arrays are not freed, triggered when running iio-test-gts tests (gts_test_gains, gts_test_itimes). The leak manifests as unreferenced...

CVE-2024-50221

CVE-2024-50221 affects the Linux kernel AMDGPU/Vangogh driver. The vulnerability arises from a memory out-of-bounds write in the GPU metrics table initialization (vangogh_get_gpu_metrics/smu_cmn_init_soft_gpu_metrics), where the metrics table allocation was too small to cover a subsequent memset....

CVE-2024-50221 drm/amd/pm: Vangogh: Fix kernel memory out of bounds write

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write KASAN reports that the GPU metrics table allocated in vangoghtablesinit is not large enough for the memset done in smucmninitsoftgpumetrics. Condensed report follows:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the iiogtsbuildavailscaletable function. No details of the vulnerability are provided at th...

WordPress plugin Responsive Data Table 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34857 · Minerva Infotech · Minerva Infotech Responsive Data Table

Name of the Vulnerable Software and Affected Versions: Minerva Infotech Responsive Data Table versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks...

WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Pricing Table versions = 1.0.0...

DEBIAN-CVE-2024-50205

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed in the loop, but if it's not changed it will remain zero. Add a variable check before the division. The...

WordPress Simple Pricing Table Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Simple Pricing Table Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51899 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9febfac93934 Credits SOPROBRO Required privilege...

The vulnerability of the nf_tables component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nftables component in the Linux operating system’s kernel is related to resource management errors in the nftablesupdtable function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-16609 · WordPress · The Charitable – Donation Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress versions prior to 1.8.2 The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for...

Online Shopping Portal dymanic_table.php File Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from a lack of valid filtering and escaping of user-supplied data in the scripts parameter of file...

Online Shopping Portal deferred_table.php Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from a lack of valid filtering and escaping of user-supplied data in the scripts parameter of file...

Online Shopping Portal empty_table.php file cross-site scripting vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from a lack of valid filtering and escaping of user-supplied data in the scripts parameter of file...

Online Shopping Portal html_table.php File Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of file...

CVE-2024-50115 KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from memory for nested SVM, as bits 4:0 of CR3 are ignored when PAE paging is used, and thus VMRUN doesn't enforce 32-byte alignment of...

WordPress Table of Contents Plus plugin <= 2411 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Table of Contents Plus versions = 2411...

CVE-2024-5578

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5578

The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...