UBUNTU-CVE-2024-4317

Missing authorization in PostgreSQL built-in views pgstatsext and pgstatsextexprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS commands of other users. The most common values may reveal column values the eavesdropper could not otherwi...

CVE-2024-34256

CVE-2024-34256 affects OFCMS V1.1.2 and is caused by SQL Injection via the new table function in OFCMS. Multiple sources (NVD, CVE listings, Red Hat, CNNVD, PT Security) consistently describe a high-severity issue with potential total impact if exploited, but exploitation details and confirmed at...

CVE-2023-6327

The ShopLentor formerly WooLentor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the purchasednewproducts function in all versions up to, and including, 2.8.7. This makes it possible for unauthenticated attackers to view all products purchas...

[SECURITY] Fedora 39 Update: uriparser-0.9.8-1.fc39

Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...

Microsoft Windows NTFS 资源管理错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A resource management error vulnerability exists in Microsoft Windows NTFS. The following products and versions are affected:Window...

WordPress plugin ShopLentor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Git 安全漏洞

Git is a free, open source distributed version control system. A security vulnerability exists in Git that stems from the fact that a local clone can hard-link arbitrary user-readable files into the object directory of a new repository...

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. An SQL injection vulnerability exists in College Management System version 1.0, which stems from an SQL injection...

Low: clamav

Issue Overview: No CVE associated with this advisory Affected Packages: clamav Issue Correction: Run dnf update clamav --releasever 2023.4.20240513 or dnf update --advisory ALAS2023-2024-615 --releasever 2023.4.20240513 to update your system. More information on how to update your system can be...

HijackLoader Enhances Its Arsenal with New Evasion Techniques

...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, atlantis, cri-tools, aws-efs-csi-driver, docker-credential-ecr-login, configmap-reload-fips, flux-notification-controller, kubecolor, metrics-server, policy-controller, timoni, step, zot, wait-for-port, kube-state-metrics-fips,...

CVE-2024-23713

CVE-2024-23713 affects Google's Android Framework, specifically migrateNotificationFilter in NotificationManagerService.java. The root cause is improper input validation that can fail to persist notification settings, enabling local privilege escalation with no extra execution privileges required...

VulnCheck KEV: CVE-2024-21626

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process from runc exec to have a working directory in the host filesystem...

CVE-2024-23700

CVE-2024-23700 is referenced in a Wear OS security bulletin as a Framework‑level vulnerability that could enable local privilege escalation by a malicious app with no extra privileges. PT-2026-3764 notes a PoC and claims the exploit can silently obtain permissions to read/write contacts, SMS, cal...

PT-2024-19704 · Open Xchange Gmbh +1 · Ox App Suite +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the user's browser session. Common user...

WordPress ShopLentor (formerly WooLentor) plugin <= 2.8.7 - Missing Authorization via purchased_new_products vulnerability

Missing Authorization via purchasednewproducts vulnerability discovered by Francesco Carlucci in WordPress Plugin ShopLentor versions = 2.8.7...

CVE-2023-35735 D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

kernel: drm/i915: Fix NULL ptr deref by checking new_crtc_state

A NULL pointer dereference vulnerability was found in the Intel i915 graphics driver in the Linux kernel. The intelatomicgetnewcrtcstate function can return NULL if the CRTC state was not previously obtained via intelatomicgetcrtcstate, but the return value was not checked before use. This leads ...

SUSE CVE-2022-48639

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tcnewtfilter tfilterput need to be called to put the refount got by tp-ops-get to avoid possible refcount leak when chain-tmpltops != NULL and chain-tmpltops != tp-ops...

Security update provided in Brocade SANnav 2.3.0a and 2.3.1

Dear Brocade Customer: This Advisory aims to inform you of the security updates provided in Brocade SANnav 2.3.0a and 2.3.1. Please review the recently posted security advisories listed here: Newly created Brocade CVEs https://support.broadcom.com/external/content/SecurityAdvisories/0/23236...