WordPress WC Marketplace Plugin <= 4.2.0 is vulnerable to Privilege Escalation

Software WC Marketplace Type Plugin Vulnerable versions = 4.2.0 Fixed in 4.2.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-8289 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID 9025ce00a31d Credits wesley...

HashiCorp Vault Archiving DoS

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to the improper handling of requests originating from unauthorized IP addresses. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-45231

An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome only...

LibVNCServer Heap Buffer Overflow DoS

The vulnerability of the rfbClientCleanup function in the cross-platform library LibVNCServer component of libvncclient is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Linux net/mlx5e DoS

The vulnerability of the net/mlx5e component in the Linux operating system is related to the assignment of null MAC during security patch updates. Exploiting this vulnerability can allow attackers to cause service failures...

Pydantic Regular Expression DoS

The vulnerability of the Pydantic data validation library is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

configfs Kernel DoS

The vulnerability of the configfs component in the Linux operating system’s kernel is related to parallel execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2024-31489

Name of the Vulnerable Software and Affected Versions Django versions 4.2.16, 5.0.9, and 5.1.1 Description An issue was discovered in the django.contrib.auth.forms.PasswordResetForm class, which allows remote attackers to enumerate user e-mail addresses by sending password reset requests and...

openldap: null pointer dereference in ber_memalloc_x function

A vulnerability was found in OpenLDAP, in bermemallocx function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service...

openSUSE: Security Advisory for roundcubemail(SUSE-RU-2024:2017-1)

The remote host is missing an update for the roundcubemail packages announced via the SUSE-RU-2024:2017-1 advisory. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Rails Html Sanitizer Configuration XSS

The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications is related to excessive reverse tracking when attempting to sanitize certain SVG attributes. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Pillow ImageFont Buffer Overflow DoS

The vulnerability of the truetype function in the Pillow library’s ImageFont function is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

SIP call processing function DoS

The vulnerability of the SIP call processing function of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Linux kernel cgroup Heap Buffer Overflow DoS

The vulnerability of the cpusreadlock function in the Linux kernel’s cgroup component is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...

Hotspot Component DoS

The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure of the btrfs file system to properly handle locked pages when processing writes, resulting in assertio...

Juniper Networks Junos OS Evolved Information Disclosure

The vulnerability of the Juniper Networks Junos OS Evolved operating system is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and cause service...

Accutech Manager Buffer Overflow DoS

The vulnerability of the software for configuring and managing Accutech Manager lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending specially crafted...

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the TIFFReadEncodedStrip function in the LibTIFF library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...