3810 matches found
CVE-2024-54271
Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...
CVE-2024-54271 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability
Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...
CVE-2024-54271 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability
Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...
CVE-2024-54271
CVE-2024-54271 is a Missing Authorization vulnerability in WPPlugin WP Cargo Track & Trace (WPTaskForce) affecting versions up to 7.0.6. The issue arises from Incorrectly Configured Access Control Security Levels, enabling potential unauthorized Settings updates. Public records (RH) indicate the ...
PT-2024-36152 · Unknown · Wpcargo Track & Trace
Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions 7.0.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPCargo Track & Trace, which allows exploitation of incorrectly configured access control security levels...
CVE-2024-51460
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system...
IBM OpenPages 安全漏洞
IBM OpenPages is an AI-driven, highly scalable governance, risk and compliance GRC solution from International Business Machines IBM. A security vulnerability exists in IBM OpenPages that stems from the possibility that under certain configurations, sensitive information may be written in plainte...
The vulnerability of the perf/x86/intel/pt components in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the perf/x86/intel/pt components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-53128
The CVE-2024-53128 issue is in the Linux kernel’s sched/task_stack path: when CONFIG_KASAN_SW_TAGS and CONFIG_KASAN_STACK are enabled, object_is_on_stack() may yield incorrect results because tagged pointers in the object could differ from the untagged stack pointer. The result can trigger warnin...
The vulnerability of the trace_event_buffer_lock_reserve() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the traceeventbufferlockreserve function in the kernel/trace/trace.c module of the Linux operating system is related to memory writing beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2024-53120 net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5tcctentryaddrule, in case ctruleadd callback returns error, zonerule-attr is used uninitiated. Fix it to use attr which has the needed pointer value...
CVE-2024-53112 ocfs2: uncache inode which has failed entering the group
In the Linux kernel, the following vulnerability has been resolved: ocfs2: uncache inode which has failed entering the group Syzbot has reported the following BUG: kernel BUG at fs/ocfs2/uptodate.c:509! ... Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...
DEBIAN-CVE-2024-53101
In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in fromkuid and fromkgid ocfs2setattr uses attr-iamode, attr-iauid and attr-iagid in a trace point even though ATTRMODE, ATTRUID and ATTRGID aren't set. Initialize all fields of newattrs to avoid...
CVE-2024-53100
In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queuelock lock and destroy Commit 76d54bf20cdc "nvme-tcp: don't access released socket during error recovery" added a mutexlock call for the queue-queuelock in nvmetcpgetaddress. However, the mutexlo...
CVE-2024-53101
In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in fromkuid and fromkgid ocfs2setattr uses attr-iamode, attr-iauid and attr-iagid in a trace point even though ATTRMODE, ATTRUID and ATTRGID aren't set. Initialize all fields of newattrs to avoid...
CVE-2024-53095
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. 0 The workload runs on Kubernetes, and some pods mount CIFS servers in non-root...
CVE-2024-53049
CVE-2024-53049: In the Linux kernel, the slub_kunit path triggers a warning when __kmalloc_cache_noprof is used directly, causing current->alloc_tag to be NULL and warning in alloc_tag_add_check. The root cause is unwrapped __kmalloc_cache_noprof usage outside kmalloc, leading to a missing all...
kernel: powerpc/pseries: Whitelist dtl slub object for copying to userspace
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu- results in a BUG when the config CONFIGHARDENEDUSERCOPY is enabled as shown below. kernel...
kernel: nfs: pass explicit offset/count to trace events
nfs in linux kernel permits using nfsfoliolength without locking the folio and without checking for null mapping. This can permit truncation and lead to kernel crash...
kernel: filelock: fix potential use-after-free in posix_lock_inode
A use-after-free vulnerability was found in the Linux kernel in traceposixlockinode. This issue occurred when the request pointer was changed to point to a lock entry added to the inode's list. Before the tracepoint could fire, another task raced in and freed the lock...