The vulnerability of the `__lpass_get_dmactl_handle` function in the qcom component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the lpassgetdmactlhandle function in the qcom component of the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-12335

The Avada Fusion Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handleclonepost function and the 'fusionblog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for...

WordPress plugin Avada Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-17549 · WordPress · Avada (Fusion) Builder

Name of the Vulnerable Software and Affected Versions: Avada Fusion Builder plugin for WordPress versions up to, and including, 3.11.12 Description: The issue allows authenticated attackers with contributor-level access and above to extract data from password protected, private, or draft posts th...

PT-2025-3649

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v6.6 Description The issue is related to the encoding of file handles in the Linux kernel. The encode fh method may fail for various reasons, and some users of exportfs encode fh,fid have a WARN ON assertion when...

CVE-2024-47538

CVE-2024-47538 affects GStreamer’s vorbis handling in the Vorbis decoder. A stack-buffer overflow is triggered in the function vorbis_handle_identification_packet within gstvorbisdec.c: a stack-allocated position buffer of size 64 is overflowed when vd->vi.channels exceeds 64, writing the valu...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP6) (SUSE-SU-2024:4209-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4209-1 advisory. This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

SUSE-SU-2024:4209-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG bsc1228511. - CVE-2024-35949: btrfs: make sure that...

SUSE-SU-2024:4208-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600237 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-42133: Bluetooth: Ignore too larg...

CVE-2024-52676

creationtimestamp| type| source ---|---|--- 2024-12-04 19:16:27+00:00| seen| https://t.me/cvedetector/12017...

CVE-2024-52275

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromWizardHandle modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-33039

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service...

CVE-2024-33039 Untrusted Pointer Dereference in Audio

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service...

CVE-2024-33039

CVE-2024-33039 concerns memory corruption in Qualcomm PAL components when a PAL client passes a random, unvalidated handle to PAL service APIs. The available sources consistently describe this as an unvalidated handle dereference that can lead to memory corruption, with the issue documented acros...

PT-2024-10677 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible out of bounds write in the handle notification response function of btif rc.cc due to a missing bounds check. This could lead to remote code execution...

PT-2024-25084 · Pal · Pal

Name of the Vulnerable Software and Affected Versions: PAL affected versions not specified Description: The issue occurs when the PAL client calls PAL service APIs by passing a random value as a handle, and the handle is not validated by the service, resulting in memory corruption. Recommendation...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets, which arises when a PAL client calls the PAL service API and passes a random value as a handle, which is not validated by the service, potentially resulting in invalid memo...

GHSA-MH2X-FCQH-FMQV @sveltejs/kit has unescaped error message included on error page

Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...

VulnCheck KEV: CVE-2024-10857

The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handledownloads function due to insufficient file path validation/sanitization. This makes it possible for authenticated attackers, with...

The vulnerability of the qla2xxx component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the qla2xxx component in the Linux operating system’s kernel is related to a memory leak in the qlt24xxhandleabts function. Exploiting this vulnerability can allow an attacker to cause a service failure...