GSD-2021-1001702 io_uring: allow conditional reschedule for intensive iterators

iouring: allow conditional reschedule for intensive iterators This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.11 by commit...

UVI-2021-1001702 io_uring: allow conditional reschedule for intensive iterators

iouring: allow conditional reschedule for intensive iterators This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.11 by commit...

PT-2021-30167

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.11 Description The issue concerns the io uring feature, which allows for conditional reschedule for intensive iterators. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2021-26172

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.11 Description: The issue concerns the io uring feature, which allows for conditional reschedule for intensive iterators. The actual impact and attack plausibility have not yet been proven. Recommendations...

Vulnerability Spotlight: Use-after-free vulnerability in Microsoft Excel could lead to code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a use-after-free vulnerability in the ConditionalFormatting functionality of Microsoft Office Excel 2019 that could allow an attacker to execute arbitrary code on the... This i...

CVE-2021-24546

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

CVE-2021-24546

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

Privilege Escalation

github.com/hashicorp/vault is vulnerable to privilege escalation. The vulnerability exists due to improper conditional check in handleAliasUpdate function in identitystorealiases.go allowing an authenticated attacker with specific write permissions to gain elevated privileges to perform...

WordPress 插件 代码注入漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Gutenberg Block Editor Toolkit-EditorsKit plugin version 1.31.6 before the code injection vulnerability, the...

Exposure of Sensitive Information in keycloak

A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the brute force protection event queue. So BruteForceProtector does not handle this events...

UBUNTU-CVE-2021-38300

arch/mips/net/bpfjit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architectur...

CVE-2021-38300

arch/mips/net/bpfjit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architectur...

CVE-2021-38300

arch/mips/net/bpfjit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architectur...

Microsoft and NIST collaborate on EO to drive Zero Trust adoption

2020s Nobelium attack sent shock waves through both government and private sectors. 2021 has already seen large-scale nation-state attacks such as Hafnium1 alongside major ransomware attacks2 on critical infrastructure. The breadth and boldness of these attacks show that, far from being deterred,...

Microsoft and NIST collaborate on EO to drive Zero Trust adoption

2020s Nobelium attack sent shock waves through both government and private sectors. 2021 has already seen large-scale nation-state attacks such as Hafnium1 alongside major ransomware attacks2 on critical infrastructure. The breadth and boldness of these attacks show that, far from being deterred,...

Intel Ethernet Adapters 800 代码问题漏洞

Intel Ethernet Adapters 800 is an Ethernet adapter from Intel Corporation USA. A code issue vulnerability exists in Intel Ethernet Adapters 800 that stems from improper conditional checking in the product. An attacker could use this vulnerability to cause information disclosure or denial of...

CVE-2021-33662

Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted...

Intel Thunderbolt controller 代码问题漏洞

Intel Thunderbolt controller is a connector standard published by Intel, an American company, that supports both copper and fiber optic media and is intended to be used as a common bus between computers and other devices. A code issue vulnerability exists in the IntelR ThunderboltTM controller,...

WordPress Authorization Issue Vulnerability (CNVD-2021-36539)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . An authorization issue vulnerability exists in versions o...

Code injection

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WooCommerce Conditional Marketing Mailer WordPress plugin before 1.5.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog,...