1485 matches found
CVE-2024-53733 WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in harshtohit111 Fence URL fence-url allows Stored XSS.This issue affects Fence URL: from n/a through = 2.0.0...
CVE-2024-53733 WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohit Harsh Fence URL allows Stored XSS.This issue affects Fence URL: from n/a through 2.0.0...
CVE-2024-53733
CVE-2024-53733 refers to a CSRF-to-Stored XSS in the WordPress Fence URL plugin (v <= 2.0.0). The issue arises from unauthenticated CSRF that enables stored XSS via the fence URL’s web-page generation flow. Public sources indicate no patch in the plugin version history; Patchstack notes advise...
PT-2024-35842 · Unknown · Rohit Harsh Fence Url
Name of the Vulnerable Software and Affected Versions: Rohit Harsh Fence URL versions n/a through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS vulnerability. This allows for Stored XSS attacks...
WordPress plugin Fence URL 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
Vulnerability of components such as DRM, AMDGPU, and system kernel firewalls in Linux operating systems, which can be exploited by attackers to cause service failures.
The vulnerability of components such as DRM, AMDGPU, and the operating system kernel’s Fence function in Linux is related to the assignment of the NULL pointer in the amdgpufencedriverswfini function. Exploiting this vulnerability can allow a hacker to cause a service failure...
WordPress Fence URL plugin <= 2.0.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Fence URL versions = 2.0.0...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gt: Fixed a potential UAF issue by revoking the fence registers. CI has been sporadically reporting the following issue triggered by igt@i915selftest@live@hangcheck on ADL-P and similar machines: 414.049203 i915:...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu/mes: fixed the use-after-free issue. Deleted the fence fallback timer to fix the ramdom use-after-free issue. v2: moved to amdgpumes.c...
WordPress Fence URL Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Fence URL Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53733 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 30a5e37e5481 Credits SOPROBRO Required privilege...
SUSE CVE-2024-53086
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...
UBUNTU-CVE-2024-53086
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Drop VM dma-resv lock on xesyncinfenceget failure in exec IOCTL Upon failure all locks need to be dropped before returning to the user. cherry picked from commit 7d1a4258e602ffdce529f56686925034c1b3b095...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a VM dma-resv lock release on xesyncinfenceget failure. No detailed vulnerability details are provided at th...
The vulnerability of the xe_preempt_fence_arm() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xepreemptfencearm function in the drivers/gpu/drm/xe/xepreemptfence.c file of the Linux kernel is related to the reutilization of previously released memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacker to...
kernel: Reapply "drm/qxl: simplify qxl_fence_wait"
In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxlfencewait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got o...
kernel: nouveau: offload fence uevents work to workqueue
In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between the fctx lock and the irq lock. This offloads the processing off the work from the irq into a workqueue...
kernel: drm/vmwgfx: Fix invalid reads in fence signaled events
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length of the drmevent to the size of the structure that's actually used. The length of the drmevent was set to the parent structure instead of to the...
kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers
A use-after-free was found in drivers/gpu/drm/i915/gt/intelggttfencing.c in the Linux kernel. This issue can be caused by a race among revocation of fence registers on one side and sequential execution of signal callbacks invoked on completion of a request that was using them on the other,...
SUSE CVE-2024-50144
In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put with fencefini Currently we can call fencefini twice if something goes wrong when sending the GuC CT for the tlb request, since we signal the fence and return an error, leading to the caller also...
DEBIAN-CVE-2024-50144
In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put with fencefini Currently we can call fencefini twice if something goes wrong when sending the GuC CT for the tlb request, since we signal the fence and return an error, leading to the caller also...