PT-2021-30416

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.9.289 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.254 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-30492

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.158 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26497

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.4.158 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-30396

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.4.291 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. It was introduced in version v2.6.31 and fixed in version v4.4.292. The actual impact and...

PT-2021-26613

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 5.14.17 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2021-26401

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.4.291 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. It was introduced in version v2.6.31 and fixed in version v4.4.292. The actual impact and...

PT-2021-26443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.14.254 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-26466

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.19.216 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2021-26421

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.31 through 4.9.289 Description The issue is related to a bulk-buffer overflow in the vmk80xx component of the comedi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF

The plugin does not have CSRF check when processing bulk actions, which could allow attackers to make logged in admin delete arbitrary forms for example...

Debian DSA-5001-1 : redis - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5001 advisory. Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary cod...

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Description XSS in bulk audit function via the asset tag parameter Proof of Concept 1: Go to http:///hardware/bulkaudit feature 2: Use alertdocument.domain as "Asset Tag" parameter 3: Click "Audit", the XSS should be triggered via the message Asset Tag ASSETTAG not found. Impact This vulnerabilit...

URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRF

The plugin does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logged in admin delete arbitrary link and group via a CSRF attack. https://example.com/wp-admin/admin.php?page=uslinks&action=bulkdelete&linkids=1...

PT-2021-8190

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bulk-buffer overflow in the comedi driver, specifically in the vmk80xx component. The driver uses endpoint-sized buffers but does not account for the possibilit...

WordPress Bulk Datetime Change plugin <= 1.11 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by apple502j in WordPress Bulk Datetime Change plugin versions = 1.11. Solution Update the WordPress Bulk Datetime Change plugin to the latest available version at least 1.12...

Bulk Datetime Change < 1.12 - Missing Authorisation

The plugin does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts. Run on "Bulk Datetime Change" page: jQuery.post"https://example.com/wp-admin/admin.php?page=bulkdatetimechange",...

redis: Integer overflow issue with Streams

An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...

redis: Denial of service via Redis Standard Protocol (RESP) request

A flaw was found in redis. When parsing an incoming Redis Standard Protocol RESP request, redis allocates memory according to user-specified values, which determine the number of elements in the multi-bulk header and size of each element in the bulk header. This flaw allows an unauthenticated,...

redis: Integer overflow issue with Streams

An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...