SUSE CVE-2024-53178

In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with opencacheddir opencacheddir may either race with the tcon reconnection even before compoundsendrecv or directly trigger a reconnection via SMB2openinit or SMBqueryinfoinit. The...

DEBIAN-CVE-2024-53176

In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount process cifskillsb calling closeallcacheddirs can race with various cached directory operations, which ultimately results in dentries not being...

CVE-2024-53177 smb: prevent use-after-free due to open_cached_dir error paths

In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...

VulnCheck KEV: CVE-2024-33112

D-Link DIR-845L v1.01KRb03 and before is vulnerable to an operating system command injection vulnerability...

CVE-2024-12428: Improper Neutralization of Special Elements used in an SQL Command

The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderuserlogindir' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

PT-2024-17591 · WordPress · Wp Data Access – App

Name of the Vulnerable Software and Affected Versions: WP Data Access – App, Table, Form and Chart Builder plugin versions up to, and including, 5.5.22 Description: The issue is related to SQL Injection via the orderuser logindir parameter due to insufficient escaping on the user-supplied paramet...

PT-2024-9920 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 20181207 Description: A critical issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file...

`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

...

CVE-2024-12635

The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dirid' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

D-Link DIR-860L Denial of Service Vulnerability

The D-Link DIR-860L is a wireless router from China's AUO D-Link. The D-Link DIR-860L suffers from a denial of service vulnerability that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2024-37605

A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37605

A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37605

A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37605

A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2024-37605

The D-Link DIR-860L wireless router (specifically REVB_FIRMWARE_2.04.B04_ic5b ) is vulnerable to a NULL pointer dereference within the /sbin/httpd microprogramming system. The root cause is an incorrect checking of HTTP request formats , which allows a remote attacker to trigger the vulnerability...

D-Link DIR-860L security vulnerabilities

The D-Link DIR-860L is a wireless router from China's AUO D-Link. The D-Link DIR-860L suffers from a denial of service vulnerability that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2024-37605: NULL Pointer Dereference

A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2024-41819

Уязвимость функции xfs trans alloc dir модуля fs/xfs/xfs trans.c поддержки файловой системы ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

D-Link DIR-823G Router Arbitrary Command Execution

The vulnerability of the SetWanSettings function in D-Link DIR-823G router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the HostName parameter. Exploiting this vulnerability allows a remote attacke...

D-Link DIR-605L Router DoS

The vulnerability of the formSetPortTr function in D-Link DIR-605L router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows a malicious actor to cause a service...