WordPress File Manager plugin <= 7.2.5 - Authenticated (Administrator+) Directory Traversal vulnerability

Authenticated Administrator+ Directory Traversal vulnerability discovered by DarkT in WordPress Plugin File Manager versions = 7.2.5...

CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

DEBIAN-CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

UBUNTU-CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

CVE-2024-26717 HID: i2c-hid-of: fix NULL-deref on failed power up

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

CVE-2024-26717

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

CVE-2024-26717 HID: i2c-hid-of: fix NULL-deref on failed power up

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid-of: fix NULL-deref on failed power up A while back the I2C HID implementation was split in an ACPI and OF part, but the new OF driver never initialises the client pointer which is dereferenced on power-up failures...

WordPress Rehub theme <= 19.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

PT-2024-21727 · Unknown · Inpersttion Slivery Extender

Name of the Vulnerable Software and Affected Versions: Inpersttion Slivery Extender versions n/a through 1.0.2 Description: The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection. Recommendations: For Inpersttion Slivery...

PT-2024-24128 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System up to 20240325 Description: A vulnerability was found in the Bdtask Multi-Store Inventory Management System, affecting an unknown function of the file /stockmovment/stockmovment/delete/ of the...

PT-2024-23774 · Unknown · Adam Bowen Tax Rate Upload

Name of the Vulnerable Software and Affected Versions: Adam Bowen Tax Rate Upload versions n/a through 2.4.5 Description: A Cross-Site Request Forgery CSRF issue in Adam Bowen Tax Rate Upload allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on the w...

PT-2024-18441 · WordPress · Genesis Blocks

Name of the Vulnerable Software and Affected Versions: Genesis Blocks plugin for WordPress versions up to, and including, 3.1.2 Description: The issue is related to Stored Cross-Site Scripting via the block content due to insufficient input sanitization and output escaping. This allows...

VulnCheck KEV: CVE-2024-31230

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images.This issue affects ShortPixel Adaptive Images: from n/a through = 3.8.2...

WordPress Unlimited Elements For Elementor plugin <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Widget Link vulnerability discovered by Webbernaut in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 1.5.96...

CVE-2024-31094

A vulnerability in websupporter Filter Custom Fields & Taxonomies Light filter-custom-fields-taxonomies-light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through = 1.05...

PT-2024-23821 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS versions up to 4.1.3 Description: A critical issue has been found in the Attachment Handler component, leading to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public. The vendor wa...

PT-2024-10600 · Zimbra · Zimbra

Name of the Vulnerable Software and Affected Versions: Zimbra versions up to 8.8.1 Description: A problematic issue was found in the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error Handler. The manipulation of the...

PT-2024-23753 · Unknown · Post-Plugin Library

Name of the Vulnerable Software and Affected Versions: Post-Plugin Library versions 2.6.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS, specifically Reflected XSS. Recommendations: For...

PT-2024-23762 · Unknown · Filter Custom Fields & Taxonomies Light

Name of the Vulnerable Software and Affected Versions: Filter Custom Fields & Taxonomies Light versions 1.05 and earlier Description: The issue is related to Deserialization of Untrusted Data, which affects Filter Custom Fields & Taxonomies Light. Recommendations: For Filter Custom Fields &...