CVE-2024-8732

The CVE-2024-8732 entry concerns the WordPress plugin Roles & Capabilities (Leira Roles) with a Reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient escaping of add_query_arg in the URL. Affected versions are up to and including 1.1.9. The vulnerability enables unauthenticate...

WordPress Roles & Capabilities plugin <= 1.1.9 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Roles & Capabilities versions = 1.1.9...

WordPress Roles & Capabilities Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Roles & Capabilities Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8732 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc79088c77ac Credits vgo0 Required...

PT-2024-39211 · WordPress · Roles & Capabilities

Name of the Vulnerable Software and Affected Versions: Roles & Capabilities plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows...

CVE-2024-32668

An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller. A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, whic...

Secure Your Business with Qualys’ New Cloud Agent Deployment using Qualys Scanner

The significance of cybersecurity in today’s world cannot be understated. Businesses are constantly exposed to evolving threats that challenge their infrastructure. Organizations deploy various security solutions to combat these risks, including agents installed on their servers, endpoints, and...

GO-2022-0452 Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc

Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc...

GO-2022-0416 Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman

Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman...

GO-2022-0390 Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

Moby Docker Engine started with non-empty inheritable Linux process capabilities in github.com/docker/docker...

CVE-2024-43836 net: ethtool: pse-pd: Fix possible null-deref

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: pse-pd: Fix possible null-deref Fix a possible null dereference when a PSE supports both c33 and PoDL, but only one of the netlink attributes is specified. The c33 or PoDL PSE capabilities are already validated in t...

CVE-2024-5209

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printing capabilities until the system is rebooted...

CVE-2024-5209

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printing capabilities until the system is rebooted...

CVE-2024-5209

Technical details (affected products, versions, root cause, fixes) are not publicly provided in the supplied documents for CVE-2024-5209; monitor for updates from vendors and standard CVE sources.

The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

SaaS applications have become indispensable for organizations aiming to enhance productivity and streamline operations. However, the convenience and efficiency these applications offer come with inherent security risks, often leaving hidden gaps that can be exploited. Conducting thorough due...

CVE-2024-33025

Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE...

CVE-2024-33025 Buffer Over-read in WLAN Host

Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2024-33025 Buffer Over-read in WLAN Host

Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE...

Multipath tools

In enterprise environments where uptime and performance are critical, ensuring continuous and efficient access to storage is paramount. Multipathing is a technique used to provide multiple physical paths between the host and the storage devices. XenServer manages these multiple I/O paths, enablin...

PT-2024-25070 · Qualcomm · Snapdragon +159

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing the BSS parameter change count or MLD capabilities fields of the ML...