The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-11052

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calculations parameter in all versions up to, and including, 3.8.19 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress Ninja Forms plugin <= 3.8.19 - Unauthenticated Stored Cross-Site Scripting via Form Calculations vulnerability

Unauthenticated Stored Cross-Site Scripting via Form Calculations vulnerability discovered by mikemyers in WordPress Plugin Ninja Forms versions = 3.8.19...

PT-2024-16726 · WordPress · Ninja Forms

Name of the Vulnerable Software and Affected Versions: Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress versions up to, and including, 3.8.19 Description: The issue is related to Stored Cross-Site Scripting via the calculations parameter due to insufficient input...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component in the Linux operating system is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel compression component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel compression component is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel component is related to incorrect calculations in the mmcblkioctlcmd function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of Linux’s x86/mmu kernel components, which allow a hacker to trigger a service failure

The vulnerability of the x86/mmu kernel components in the Linux operating system is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-16799 · M Files · M-Files Aino

Name of the Vulnerable Software and Affected Versions: M-Files Aino versions prior to 24.10 Description: The issue is related to improper access control, allowing an authenticated user to access object information due to an incorrect calculation of effective permissions. Recommendations: For...

DEBIAN-CVE-2024-50270

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damonfeedloopnextinput damonfeedloopnextinput is inefficient and fragile to overflows. Specifically, 'scoregoaldiffbp' calculation can overflow when 'score' is high. The calculation is actually...

ROS-20241107-02

A vulnerability in the x86/mmu components of the Linux operating system kernel is related to incorrect calculations in the kvmtdpmmutrysplithugepages, kvmtdpmmucleardirtyslot, and cleardirtyptmasked functions in the arch/x86/kvm/mmu/tdpmmu.c. Exploitation of the vulnerability could allow an...

K000148343: Diffie-Hellman key exchange protocol vulnerability CVE-2024-41996

Security Advisory Description Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client...

The vulnerability of the hclge_query_reg_info_of_ssu() function in the networking adapter driver of the Hisilicon HNS3 kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hclgequeryreginfoofssu function in the drivers/net/ethernet/hisilicon/hns3/hns3pf/hclgeerr.c file of the Linux operating system’s network adapter driver for Hisilicon HNS3 is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the read() and write() functions in the amdpgu driver of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the read and write functions in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c file, a driver for AMD GPU, in the Linux operating system is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the navi10_is_support_fine_grained_dpm() function in the amdpgu driver for Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the navi10issupportfinegraineddpm function in the driver/gpu/drm/amd/pm/swsmu/smu11/navi10ppt.c file of the amdpgu kernel in the Linux operating system is related to incorrect index calculations. Exploiting this vulnerability could allow an attacker to compromise the...

kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing

No description is available for this CVE...

kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing

No description is available for this CVE...

kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing

No description is available for this CVE...

kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing

No description is available for this CVE...

Oracle Linux 7 : kernel (ELSA-2024-6994)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6994 advisory. 3.10.0-1160.119.1.0.5.el7.OL7 - wifi: mac80211: Avoid address calculations via out of bounds array indexing Kees Cook Orabug: 37092983 Tenable has extracted the...