PT-2024-34104

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A crash can occur in the Linux kernel when blk alloc disk fails, causing the md-disk variable to be set to an error value. The cleanup mapped device function attempts to access md-disk...

ROS-20241015-09

A vulnerability in the Golang programming language is related to the lack of value cleanup. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

markdown-to-jsx security vulnerability

markdown-to-jsx is one of the lightest, customizable React markdown components by Evan Jacobs Personal Developer. A security vulnerability exists in markdown-to-jsx prior to version 7.4.0 that stems from improper input cleanup...

Malicious code in shmam-mw-test-3-test-package-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51f76988cbf6f57115b148f6bc499d56997dcb2eef0257e563fffbef11fd982 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails

...

btrfs: clean up our handling of refs == 0 in snapshot delete

...

Malicious code in module-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb37f88f9f6a37fa239ee1d591acdd1ee642b1d6447cba12accde00c474a94bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

nilfs2: fix missing cleanup on rollforward recovery error

...

ila: call nf_unregister_net_hooks() sooner

...

WordPress Plugin Category Icon Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Rescue Shortcodes has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-8240

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.0+ Description: The issue is related to a use-after-free vulnerability in the gsm cleanup mux function in the Linux kernel. This vulnerability can be exploited by an attacker to impact the confidentiality,...

LoLLMs security vulnerabilities

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from improper parameter cleanup, resulting in a path traversal vulnerability that allows an attacker to read any file on the victim's comput...

WordPress plugin WP Ultimate Post Grid has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

JSONPath Plus security vulnerability

JSONPath Plus is an open source library for JSONPath Plus. A security vulnerability exists in JSONPath Plus versions prior to 10.0.0 that stems from improper input cleanup and is susceptible to a Remote Code Execution RCE attack, which can be exploited by an attacker to execute arbitrary code on ...

PT-2024-33877

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.11.2-asahi+ Description: The issue is related to the Linux kernel, specifically with the drm/fbdev-dma component. It has been resolved by ensuring that deferred I/O is only cleaned up when necessary. The probl...

WordPress plugin Curator.io has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Elementor Inline SVG has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f8e217b061367a2544f69c657e9f3d6cc3535698498abe94f975e9147d708e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Plugin: Embed PDF Viewer – Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plug-in. WordPress plugin Embed PDF Viewer...