UBUNTU-CVE-2024-53225

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix alignment failure at maxnshift When configuring a kernel with PAGESIZE=4KB, depending on its setting of CONFIGCMAALIGNMENT, VCMDQLOG2SIZEMAX=19 could fail the alignment test and trigger a WARNON: WARNING...

CVE-2024-56544

CVE-2024-56544 details a kernel fix where the udmabuf folios array was changed from kmalloc to kvmalloc_array to support larger allocations. Under PAGE_SIZE=4096, MAX_PAGE_ORDER=10 (4MB memory limit for kmalloc), an udmabuf larger than 4MB could fail with a warning and NULL return. The patch enab...

PT-2024-36894

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A NULL pointer issue was observed in the Linux kernel when a hid device is added from Process A, resulting in the addition of a led cdev, and a subsequent call to access the led cdev attribute...

DEBIAN-CVE-2024-53146

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecbcompound4res...

WordPress Calculated Fields Form plugin <= 5.2.63 - Denial of Service vulnerability

Denial of Service vulnerability discovered by Max Boll b0lli in WordPress Plugin Calculated Fields Form versions = 5.2.63...

BD’s various products have security vulnerabilities

BD BACTEC Blood Culture System and others are products of BD Medical BD, Inc. the BD BACTEC Blood Culture System is a blood culture media system. the BD COR System is a fully automated and integrated high-throughput diagnostic system. the BD EpiCenter Microbiology Data Management System is a...

CVE-2024-48872 Bypass of "Max failed attempts" restriction via race condition

Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, and 9.5.x = 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restriction and send a big number of login attempts before being...

CVE-2024-48872

Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, and 9.5.x = 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restriction and send a big number of login attempts before being...

PT-2025-2979

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns a denial of service DoS vulnerability in the Linux kernel. Specifically, when the ceph mdsc build path function attempts to build a path longer than PATH MAX, it enters an...

CVE-2024-48872: Concurrent Execution using Shared Resource with Improper Synchronization

Mattermost versions 10.1.x = 10.1.2, 10.0.x = 10.0.2, 9.11.x = 9.11.4, and 9.5.x = 9.5.12 fail to prevent concurrently checking and updating the failed login attempts. which allows an attacker to bypass of "Max failed attempts" restriction and send a big number of login attempts before being...

PT-2025-8839

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed integer overflow issue has been identified in the Linux kernel, specifically in the printk function when defining LOG BUF LEN MAX. This occurs due to shifting 1 31 on a 32-bit...

JDK: HTTP client improper handling of maxHeaderSize (8328286)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

CVE-2023-26520

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...

MAL-2024-11395 Malicious code in mona-max (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mona-max (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mona-client-max (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11390 Malicious code in mona-client-max (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-12098

Name of the Vulnerable Software and Affected Versions Max Chirkov Advanced Text Widget versions 2.1.2 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For Max Chirkov Advanced Tex...

CVE-2023-26520: Missing Authorization

Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Text Widget : from n/a through 2.1.2...