VulnCheck KEV: CVE-2024-7339

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be...

SUSE-SU-2024:3227-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release bsc1228576. - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate bsc122945...

WordPress MM-Breaking News plugin <= 0.7.9 - Stored XSS via CSRF vulnerability

Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin MM-Breaking News versions = 0.7.9...

CVE-2024-8054

The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-8054

The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-8056 MM-Breaking News <= 0.7.9 - Reflected XSS

The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2024-8056

CVE-2024-8056 affects MM-Breaking News WordPress plugin (versions ≤ 0.7.9). Root cause: failure to escape $_SERVER['REQUEST_URI'] when emitting it inside an HTML attribute, enabling Reflected Cross-Site Scripting in older browsers. Public sources (including Red Hat advisory and Patchstack) corrob...

CVE-2024-8054

CVE-2024-8054 concerns the MM-Breaking News WordPress plugin (versions up to 0.7.9). Public data states lack of CSRF checks in some areas, plus missing sanitization and escaping, enabling a logged-in admin to add Stored XSS payloads via CSRF. Red Hat entry reiterates the issue verbatim. Patch gui...

Oracle Linux 9 : kernel (ELSA-2024-6567)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6567 advisory. - usb-storage: alauda: Check whether the media is initialized CKI Backport Bot RHEL-43716 CVE-2024-38619 - mm: avoid overflows in dirty throttling logi...

WordPress MM-Breaking News Plugin <= 0.7.9 is vulnerable to Cross Site Scripting (XSS)

Software MM-Breaking News Type Plugin Vulnerable versions = 0.7.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8056 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f2e6bf25242a Credits Bob Matyas Required...

WordPress MM-Breaking News Plugin <= 0.7.9 is vulnerable to Cross Site Scripting (XSS)

Software MM-Breaking News Type Plugin Vulnerable versions = 0.7.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8054 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8d3d2c555b3e Credits Daniel Ruf Required...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12618)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12618 advisory. - net: mana: Fix possible double free in error handling path Ma Ke Orabug: 36897038 CVE-2024-42069 - net: relax socket state check at accept time...

CVE-2024-45024

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table walking code to also walk hugetlb VMAs without most hugetlb special-casing, preparing for the future of having less hugetlb-specific page tab...

CVE-2024-45024

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table walking code to also walk hugetlb VMAs without most hugetlb special-casing, preparing for the future of having less hugetlb-specific page tab...

CVE-2024-45024 mm/hugetlb: fix hugetlb vs. core-mm PT locking

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb vs. core-mm PT locking We recently made GUP's common page table walking code to also walk hugetlb VMAs without most hugetlb special-casing, preparing for the future of having less hugetlb-specific page tab...

CVE-2024-45024

CVE-2024-45024 relates to a Linux kernel Hugetlb PT locking issue fixed by aligning huge page table locking with core-mm PT walkers. The root cause: during GUP’s shared page-table walking, hugetlb folios spanning multiple PTEs could be locked using PTE table locks (pte_offset_map_lock) while core...

CVE-2024-45022

CVE-2024-45022 affects Linux kernel mm/vmalloc: a high-order allocation fallback to order-0 in vm_area_alloc_pages() could lead __vmap_pages_range_noflush() to map pages with different shifts, risking memory corruption. The documentation states the fix is to remove the fallback code, so that if a...

CVE-2024-45022

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vmareaallocpages with high order fallback to order 0 The vmappagesrangenoflush assumes its argument pages contains pages with the same page shift. However, since commit e9c3cda4d86e "mm, vmalloc: f...

CVE-2024-45022 mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix page mapping if vmareaallocpages with high order fallback to order 0 The vmappagesrangenoflush assumes its argument pages contains pages with the same page shift. However, since commit e9c3cda4d86e "mm, vmalloc: f...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...