WordPress WP Database Reset Plugin <= 3.22 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Database Reset Type Plugin Vulnerable versions = 3.22 Fixed in 3.23 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-1501 Patch priority Low CVSS severity Low 4.7 Developer WebFactory Ltd. PSID c53221c813e9 Credits Lucio Sá Required...

Helm dependency management path traversal

A Helm contributor discovered a path traversal vulnerability when Helm saves a chart including at download time. Impact When either the Helm client or SDK is used to save a chart whose name within the Chart.yaml file includes a relative path change, the chart would be saved outside its expected...

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.

Ltd. is a private scientific and technological enterprise with technology development as the main body, specializing in the research, development, production and sales of remote water, electricity, gas, heat four meters and meter reading system. The water information management platform of Shando...

parts.weil-mclain.com Cross Site Scripting vulnerability OBB-3852450

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Login Lockdown Plugin <= 2.08 is vulnerable to Broken Access Control

Software Login Lockdown Type Plugin Vulnerable versions = 2.08 Fixed in 2.09 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1340 Patch priority Low CVSS severity Low 5.4 Developer WebFactory Ltd. PSID 5a8910b6c979 Credits Lucio Sá Required privilege...

CVE-2024-24877

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9...

CVE-2024-24877

CVE-2024-24877 affects Wonder Slider Lite (Wonderplugin Slider Lite) up to version 13.9. This is a Reflected XSS caused by improper neutralization of input during web page generation. Public details from NVD indicate CVSS v3.1 base score around 6.1 (MEDIUM); PatchStack and related entries list a ...

CVE-2024-24877 WordPress Wonder Slider Lite Plugin <= 13.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9...

Graylog session fixation vulnerability through cookie injection

Impact Reauthenticating with an existing session cookie would re-use that session id, even if for different user credentials. In this case, the pre-existing session could be used to gain elevated access to an existing Graylog login session, provided the malicious user could successfully inject...

WordPress Minimal Coming Soon & Maintenance Mode – Coming Soon Page Plugin <= 2.37 is vulnerable to Bypass Vulnerability

Software Minimal Coming Soon & Maintenance Mode – Coming Soon Page Type Plugin Vulnerable versions = 2.37 Fixed in 2.38 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-1075 Patch priority Low CVSS severity Low 3.7 Developer WebFactory Ltd. PSID 9ddda2f1294b Credi...

CVE-2023-5249

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn...

CVE-2023-5643

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel...

Race condition

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn...

CVE-2023-5249 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn...

CVE-2023-5249

CVE-2023-5249 affects Arm Mali Bifrost GPU Kernel Driver (r35p0–r40p0) and Valhall GPU Kernel Driver (r35p0–r40p0). It is a local Use-After-Free caused by improper memory handling that can lead to a memory race condition. Impact is local, with potential confidentiality, integrity, and availabilit...

CVE-2023-5249 Mali GPU Kernel Driver allows improper GPU memory processing operations

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn...

CVE-2023-5643

Summary (CVE-2023-5643) : An out-of-bounds write vulnerability exists in Arm Mali GPU kernel drivers (Bifrost, Valhall) and Arm 5th Gen GPU Architecture Kernel Driver. The issue allows a local, non-privileged user to trigger improper GPU memory processing, potentially writing outside buffer bound...

CVE-2023-5643 Mali GPU Kernel Driver allows improper GPU memory processing operations

Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel...

CVE-2023-5249: Use After Free

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn...