SUSE CVE-2021-47201

In the Linux kernel, the following vulnerability has been resolved: iavf: free qvectors before queues in iavfdisablevf iavffreequeues clears adapter-numactivequeues, which iavffreeqvectors relies on, so swap the order of these two function calls in iavfdisablevf. This resolves a panic encountered...

CVE-2024-32135

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPZest Disable Comments | WPZest.This issue affects Disable Comments | WPZest: from n/a through 1.51...

CVE-2024-32135 WordPress Disable Comments | WPZest plugin <= 1.51 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPZest Disable Comments | WPZest.This issue affects Disable Comments | WPZest: from n/a through 1.51...

CVE-2024-32135

CVE-2024-32135 refers to an SQL Injection flaw in the WPZest Disable Comments plugin for WordPress (Disable Comments | WPZest), affecting version up to 1.51. Connected sources confirm the vulnerability type and affected plugin, but do not provide a patch; patch status is listed as Unpatched. The ...

PT-2024-27835 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability. It occurs through the "/admin/CloudAccounts" API endpoint, specifically in the account name, user password, and server fields, affecting al...

PT-2024-23628 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.18 Description: A Stack Overflow issue allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function. Recommendations: For Tenda AC15 version 15.03.05.18, consider...

PT-2024-10786 · Codoforum · Codoforum

Name of the Vulnerable Software and Affected Versions: Codoforum version 4.9 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the Category name component...

PT-2024-24065 · Hamid Alinia · Idehweb Login With Phone Number

Name of the Vulnerable Software and Affected Versions: Hamid Alinia - idehweb Login with phone number versions 1.6.93 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Login with phone number feature. This allows an attacker to perform unintended actions on a user's...

PT-2024-27825 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability, which occurs through the /admin/DeviceReplication endpoint, specifically in the execution range field, and affects all parameters. This cou...

WordPress Plugin Disable Comments SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Disable Comments suffers from a SQ...

PT-2024-27790 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue involves improper neutralisation of Server-Side Includes SSI through Device Synchronizations at the "/admin/DeviceReplication" API endpoint. This could allow a remote user to execute arbitrar...

PT-2024-3134 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: The issue is related to a stack-based buffer overflow in the formSetRebootTimer function of the /goform/SetRebootTimer API endpoint. This can be exploited by manipulating the rebootTime argument,...

PT-2024-27844 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability that occurs through the /admin/AdvancedSystem endpoint, specifically in the description field, and affects all parameters. This could allow ...

PT-2024-3222 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.3.1 Brocade SANnav version 2.3.0a Description: The issue is related to the class FileTransfer in Brocade SANnav, which uses the ssh-rsa signature scheme with a SHA-1 hash. This could allow a remote,...

PT-2024-23494 · Jnt Telecom · Jnt Liftcom Ums

Name of the Vulnerable Software and Affected Versions: JNT Telecom JNT Liftcom UMS V1.J Core Version JM-V15 Description: An issue in the software allows a remote attacker to execute arbitrary code via the Network Troubleshooting functionality. Recommendations: For JNT Telecom JNT Liftcom UMS V1.J...

PT-2024-24173 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at "/core/new category2". This enables attackers t...

PT-2024-27700 · Xiongmai · Xiongmai Ahb7004T-Gs-V3 +6

Name of the Vulnerable Software and Affected Versions: Xiongmai AHB7804R-MH-V2 Xiongmai AHB8004T-GL Xiongmai AHB8008T-GL Xiongmai AHB7004T-GS-V3 Xiongmai AHB7004T-MHV2 Xiongmai AHB8032F-LME Xiongmai XM530 R80X30-PQ 8M Description: A critical vulnerability was found in the Sofia Service component ...

PT-2024-3333 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...

WordPress Disable Comments | WPZest plugin <= 1.51 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Disable Comments | WPZest versions = 1.51...

SUSE CVE-2024-26749

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3gadgetepdisable ... cdns3gadgetepfreerequest&privep-endpoint, &privreq-request; listdelinit&privreq-list; ... 'privreq' actually free at cdns3gadgetepfreerequest. But listdelinit us...