CVE-2021-24216: Unrestricted Upload of File with Dangerous Type

The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations...

WordPress plugin code-related vulnerabilities

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress All-in-One WP Migration has a code issue vulnerability that can be exploited by attackers to upload PHP...

PT-2022-9438

Name of the Vulnerable Software and Affected Versions All-in-One WP Migration WordPress plugin versions prior to 7.41 Description The issue allows administrators to upload PHP files on their site due to a lack of validation of uploaded files' extensions. This affects even multisite installations...

RUSTSEC-2022-0012 Arrow2 allows double free in `safe` code

The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...

Arrow2 allows double free in `safe` code

The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...

OPENSUSE-SU-2022:0061-1 Security update for mc

This update for mc fixes the following issues: Midnight Commander 4.8.27: Core - Reimplement version detection 3603, 4249 - Significantly reduce rebuilt time after version change 2252, 4266 - Drop automatic migration of configuration from /.mc to XDG-based directories 3682 - zsh: support custom...

CVE-2021-24994

The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue...

CVE-2021-24994

The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue...

CVE-2021-24994: Improper Neutralization of Input During Web Page Generation

The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issue...

PT-2022-9553

Name of the Vulnerable Software and Affected Versions Migration, Backup, Staging WordPress plugin versions prior to 0.9.69 Description The issue concerns a Stored Cross-Site Scripting problem. It arises due to the lack of authorisation when adding remote storages and the failure to properly...

GSD-2022-1000537 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000455 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

KVM: x86: nSVM: fix potential NULL derefernce on nested migration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

PT-2022-28729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description A potential NULL dereference issue was identified in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28715

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to the Linux Kernel, specifically in the task mmu.c file. It involves not reading the mapcount for a migration entry. The actual impact and potential for attack have not...

PT-2022-28655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to the Linux Kernel, specifically in the task mmu.c file. It involves not reading the mapcount for a migration entry. The actual impact and attack plausibility have not...

PT-2022-28800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to the Linux Kernel, specifically in the task mmu.c file. It involves not reading the mapcount for a migration entry. The actual impact and potential for attack have not...

PT-2022-28721

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue concerns the handling of Copy-on-Write COW pages in the Linux Kernel, specifically regarding NUMA migration. It has been noted that attempting to NUMA-migrate COW pages with other...

PT-2022-28811

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.16.10 Description A potential NULL dereference issue was discovered in the KVM x86 nSVM component on nested migration. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2022-28659

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue concerns the handling of Copy-on-Write COW pages in the Linux Kernel, specifically regarding NUMA migration. The problem arises when the kernel attempts to migrate COW pages that...

The federal Zero Trust strategy and Microsoft’s deployment guidance for all

You’d be forgiven for missing the White House announcement on federal Zero Trust strategy on January 26, 2022.1 After all, on that day alone a Supreme Court Justice announced his intention to retire, the Federal Reserve announced its plan to raise interest rates, and the State Department was busy...