CVE-2022-0855

CVE-2022-0855 affects microweber-dev/whmcs_plugin prior to version 0.0.4. The root cause is an improper resolution of path equivalence in the plugin, which can enable an open redirect or misrouting of a request. Exploitation details in the connected records describe an open-redirect scenario that...

CVE-2022-0855 Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

WordPress Auto Set Admin Colour on Staging and Dev plugin <= 4.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Auto Set Admin Colour on Staging and Dev plugin versions = 4.0.0. Solution No patched version available...

WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress Auto Set Admin Colour on Staging and Dev plugin <= 4.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto Set Admin Colour on Staging and Dev plugin versions = 4.0.0. Solution No patched version available...

WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WordPress Dev Powers – ACF Color Coded Field Types Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Dev Powers – ACF Color Coded Field Types Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Dev Powers – Element Selector jQuery Powers Plugin plugin versions = 1.0.1. Solution No patched version available...

WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Dev Powers – Display Screen Dimensions to Admin Plugin plugin versions = 1.0.1. Solution No patched version available...

PT-2022-28920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.6 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.97 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28385

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not yet...

PT-2022-28411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue is related to the rtnetlink component in the Linux Kernel, specifically with the rtnl newlink function. It involves a potential problem with refreshing master dev/m ops. The actual...

PT-2022-28443

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.14 through 5.4.176 Description The issue is related to the rtnetlink component, specifically in the rtnl newlink function, where it fails to refresh master dev/m ops. The actual impact and attack plausibility have not y...

Android kernel gadget_dev_desc_UDC_show Unauthorized Access

The vulnerability of the gadgetdevdescUDCshow function in the Android operating system’s kernel is related to the disclosure of information in an unauthorized data area. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...

CVE-2022-24958

drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev-buf release...