CVE-2024-2106 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.10 - Basic Information Exposure via REST route

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 3.2.10. This can allow unauthenticated attackers to extract sensitive data including all registered user's username and email...

Essays from the Second IWORD

The Ash Center has posted a series of twelve essays stemming from the Second Interdisciplinary Workshop on Reimagining Democracy IWORD 2023. Aviv Ovadya, Democracy as Approximation: A Primer for “AI for Democracy” Innovators Kathryn Peters, Permission and Participation Claudia Chwalisz, Moving...

CVE-2024-2215

A cross-site request forgery CSRF vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions...

CVE-2021-47046 drm/amd/display: Fix off by one in hdmi_14_process_transaction()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix off by one in hdmi14processtransaction The hdcpi2coffsets array did not have an entry for HDCPMESSAGEIDWRITECONTENTSTREAMTYPE so it led to an off by one read overflow. I added an entry and copied the 0x0 valu...

CVE-2021-47046

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix off by one in hdmi14processtransaction The hdcpi2coffsets array did not have an entry for HDCPMESSAGEIDWRITECONTENTSTREAMTYPE so it led to an off by one read overflow. I added an entry and copied the 0x0 valu...

CVE-2021-46917

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command instead of blasting the MMIO region. Th...

UBUNTU-CVE-2021-46917

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command instead of blasting the MMIO region. Th...

CVE-2021-46917 dmaengine: idxd: fix wq cleanup of WQCFG registers

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix wq cleanup of WQCFG registers A pre-release silicon erratum workaround where wq reset does not clear WQCFG registers was leaked into upstream code. Use wq reset command instead of blasting the MMIO region. Th...

CVE-2023-2331486

Technical details for CVE-2023-2331486 are not publicly available in the provided documents. Monitor for updates.

CAN-2004-0232

CVE-2004-0232 is referenced in multiple security feeds as a vulnerability in Midnight Commander (mc). Connected documents describe the issue as involving buffer overflows, format string bugs, and insecure temporary file handling within mc, with CVE-2004-0226/0231/0232 grouped together in advisori...

CAN-2004-0563

The CVE CAN-2004-0563 (CVE-2004-0563) relates to freenet6 where the tspc.conf file is world-readable, exposing potential sensitive data (e.g., username and password) to local users. Connected advisories confirm Debian’s DSA-555-1 and related Debian security notices describe a local information-le...

CAN-2004-1052

CVE-2004-1052 affects the BNC IRC bouncing proxy. The issue is a remote buffer‑overflow in the getnickuserhost() function triggered by IRC server responses, allowing arbitrary code execution on the client host that processes the overflowing response. Public sources highlight this as a remote vuln...

CAN-2004-1000

CVE-2004-1000 (lintian) concerns the Debian lintian checker: it removes the working directory even if it wasn’t created at program start, enabling a local attacker to delete arbitrary files via a symlink attack. This insecure temporary-directory behavior is the root cause. Remediations are provid...

CAN-2004-1264

CVE-2004-1264 affects the chbg utility. Debian/DSA-644-1 reports a local buffer overflow in chbg (config.c/simplify_path) that could allow arbitrary code execution when processing a crafted scenario file. The issue is exploitable remotely via a malicious configuration, with Debian indicating patc...

CAN-1999-1572

CVE-1999-1572 is a historic issue in GNU cpio where using the -O option sets a 0 umask, creating output files with mode 0666 (world-readable/writable). Connected advisories across Debian, RHEL, Ubuntu, CentOS, Gentoo, and others confirm the impact on cpio packages and reference CVE-1999-1572 (wit...

CAN-2005-0814

The CVE entry CVE-2005-0814 is connected to multiple advisories and vulnerability checks for the LSH (LSH/Lsh) family. Publicly cited details describe a remote DoS vulnerability affecting lshd in Lysator LSH 1.x/2.x prior to 2.0.1, with reports of issues in various platforms (e.g., FreeBSD ports,...

CAN-2004-1154

CVE-2004-1154 pertains to Samba (versions 2.0.0 through 3.0.9). The OpenVAS entries describe an integer overflow that enables remote code execution. Public details in the connected Nessus/OpenVAS items confirm Samba vulnerability exposure and reference patches (e.g., Solaris patch sets) that miti...

CAN-2005-1345

CVE-2005-1345 is associated with multiple Squid vulnerabilities described across openvas entries and CentOS/Red Hat advisories. The issues involve: (1) improper handling of access control lists that could allow an authorised remote user to gain more access than intended, (2) a flaw related to how...

CAN-2005-0525

Technical details for CVE-2005-0525 are not publicly available in the provided documents. Monitor for updates.

CAN-2005-1260

The CAN-2005-1260 entry concerns bzip2 up to version 1.0.2 (and earlier). A crafted bzip2 file can trigger an infinite loop during decompression, leading to denial of service by exhausting disk space or CPU time. Several connected advisories confirm impact is via decompression of untrusted archiv...