PT-2024-8557 · Microsoft · Sql Server Native Client

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Native Client affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory within the Native Client component of Microsoft SQL Server. This could allow a remote attacker to...

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, allows attackers to execute arbitrary code or cause the application to crash.

The vulnerability of the opennurbs.dll library, which is used in AutoCAD software for modeling, designing, and drafting, arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally or execute arbitrary...

The vulnerability of the ODXSW_DLL.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to execute arbitrary code.

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD software for simulation, design, and drafting, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a...

SUSE CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

UBUNTU-CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

CVE-2024-50254 bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

CVE-2024-50254

CVE-2024-50254 : In the Linux kernel, the bpf_iter_bits_destroy() path incorrectly used kit->nr_bits bit = kit->nr_bits on completion, uses !nr_bits || bits >= nr_bits to determine completion, and keeps nr_bits > 64 to indicate dynamic allocation. It also changes kit->nr_bits from ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a faulty dynamic allocation bit release in the bpfiterbitsdestroy function...

RLSA-2024:8800 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

RLSA-2024:8830 Low: bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter eBPF available in recent Linux kernels 4.x. BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing...

WordPress Dynamic Post Grid Elementor Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Dynamic Post Grid Elementor Addon versions = 1.0.6...

The vulnerability of the python3.dll library, which is an interpreter for the Python programming language, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the python3.dll library, which is responsible for interpreting Python programming language code, is related to the use of an invalid search path during the loading of the vulnerable file after the PySetPath function is called. Exploiting this vulnerability could allow a...

WordPress Dynamic Post Grid Elementor Addon Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic Post Grid Elementor Addon Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51852 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5db0fa01f3bb Credits Gab Required privile...

Online Shopping Portal dymanic_table.php File Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from a lack of valid filtering and escaping of user-supplied data in the scripts parameter of file...

The vulnerability of the _XkbSetCompatMap function in the X Window System X.Org Server implementation allows a hacker to increase their privileges.

The vulnerability of the XkbSetCompatMap function in the X Window System X.Org Server implementation is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the dynamicImport() function in the lilconfig configuration tool allows a hacker to execute arbitrary code.

The vulnerability of the dynamicImport function in the lilconfig configuration tool is related to improper handling of code generation when processing the.d.ts syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision involves the transmission of confidential information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a...

CVE-2024-10084

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7getpostvar shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the...

CVE-2024-10084

The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7getpostvar shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the...

WordPress Contact Form 7 – Dynamic Text Extension plugin <= 4.5 - Information Disclosure via Shortcode vulnerability

Information Disclosure via Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 4.5...