PT-2024-10480 · Drupal · Node Export

Name of the Vulnerable Software and Affected Versions: Drupal Node export versions 7.X- through 7.X-3.2 Description: The issue is related to the deserialization of untrusted data in the Node export module of the Drupal CMS, which can lead to object injection. This allows a remote attacker to...

PT-2024-8475

Name of the Vulnerable Software and Affected Versions Kubernetes kubelet versions through 1.28.11 Kubernetes kubelet versions from 1.29.0 through 1.29.6 Kubernetes kubelet versions from 1.30.0 through 1.30.2 Description The issue allows arbitrary command execution via specially crafted gitRepo...

CVE-2024-52420

Cross-Site Request Forgery CSRF vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through = 1.4.0...

CVE-2024-52420 WordPress Disable Admin Notices individually plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Creative Motion Disable Admin Notices individually allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through 1.3.5...

CVE-2024-52420

CVE-2024-52420 concerns a Cross-Site Request Forgery in the WordPress plugin Disable Admin Notices individually. The initial record specifies that the issue affects plugin versions up to 1.3.5, and multiple connected sources corroborate a CSRF vulnerability in this plugin. Patchstack and related ...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47589: igbvf: fix double free in igbvfprobe bsc1226557. CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully bsc1224526. CVE-2024-47674: mm: avo...

PT-2024-34962 · Opencart · Opencart Product Display

Name of the Vulnerable Software and Affected Versions: Ajinkya N OpenCart Product Display versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious script...

CVE-2024-52420: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Themeisle Disable Admin Notices individually disable-admin-notices allows Cross Site Request Forgery.This issue affects Disable Admin Notices individually: from n/a through = 1.4.0...

Oracle Linux 9 : .NET / 9.0 (ELSA-2024-9543)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9543 advisory. 9.0.100-1.0.1 - Add support for Oracle Linux 9.0.100-1 - Update to .NET SDK 9.0.100 and Runtime 9.0.0 - Resolves: RHEL-65539 9.0.100rc.2.24474.1-0.7 -...

PT-2024-35260 · Unknown · Disable Admin Notices Individually

Name of the Vulnerable Software and Affected Versions: Disable Admin Notices individually versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by...

PT-2024-10680

Name of the Vulnerable Software and Affected Versions Android versions prior to 8.1.0 Description The issue is related to a possible use-after-free due to improper locking in the f hidg read and hidg disable functions of f hid.c. This could lead to local escalation of privilege with no additional...

WordPress plugin: Disable Admin Notices individually – Cross-Site Request Forgery vulnerability

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

PT-2024-34787 · WordPress · Amazon Associate Filter

Name of the Vulnerable Software and Affected Versions: Amazon Associate Filter versions 0.4 and earlier Description: A Cross-Site Request Forgery CSRF vulnerability allows Stored XSS attacks. This issue affects the Amazon Associate Filter plugin for WordPress. Remediation is crucial to safeguard...

libvpx security update

1.9.0-8 - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-58144...

PT-2024-9175 · Absysnet · Absysnet

Name of the Vulnerable Software and Affected Versions: AbsysNet version 2.3.1 Description: An IDOR Insecure Direct Object Reference vulnerability has been discovered, which could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifi...

PT-2024-35346

Name of the Vulnerable Software and Affected Versions Graylog versions 6.1.0 through 6.1.1 Description Graylog is a log management platform. The reporting functionality allows the creation and scheduling of reports containing dashboard widgets displaying log messages or aggregated metrics. A flaw...

PT-2024-35663

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc3+ Description A vulnerability in the Linux kernel has been resolved, specifically in the nfsd module. The issue arises when the last reference for cache head is reduced to zero in c show and e show usin...

PT-2025-3435 · D Link · Dsr-250 +4

Name of the Vulnerable Software and Affected Versions: D-Link DSR-150 versions 3.13 through 3.17B901C D-Link DSR-150N versions 3.13 through 3.17B901C D-Link DSR-250 versions 3.13 through 3.17B901C D-Link DSR-250N versions 3.13 through 3.17B901C D-Link DSR-500N versions 3.13 through 3.17B901C D-Li...

PT-2024-15975 · WordPress · Convertcalculator

Name of the Vulnerable Software and Affected Versions: ConvertCalculator for WordPress plugin versions up to, and including, 1.1.1 Description: The issue is related to Stored Cross-Site Scripting via the id and type parameters due to insufficient input sanitization and output escaping. This allow...

PT-2024-16673 · Craigk5N · Webcalendar

Name of the Vulnerable Software and Affected Versions: craigk5n/webcalendar version 1.3.0 Description: A stored cross-site scripting XSS issue exists in the 'Report Name' input field while creating a new report. An attacker can inject malicious scripts, which are then executed in the context of...