CVE-2021-47487

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2021-47478

In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted isofsreadinode can read data beyond the end of buffer. Sanity-check the directory entry length before using it...

CVE-2024-5025

CVE-2024-5025 affects the WordPress plugin Memberpress (vendor: MemberPress) up to version 1.11.29. Root cause: Stored cross-site scripting via the arglist parameter due to insufficient input sanitization and output escaping. Impact: authenticated attackers with Contributor+ access can inject scr...

CVE-2024-3495

CVE-2024-3495 : WordPress plugin Country State City Dropdown CF7 (

CVE-2021-47490

CVE-2021-47490 affects the Linux kernel DRM memory management (drm/ttm). The issue is a memleak during ttm_transfered_destroy, and the fix includes cleanup of fences for ghost objects. The available connected advisories/policy notes confirm the vulnerability is fixed by kernel patches; no exploit...

CVE-2021-47486

CVE-2021-47486 affects the Linux kernel’s RISC-V BPF JIT: when NR_JIT_ITERATIONS is reached and jit_data->header is NULL, bpf_jit_binary_free() dereferences a NULL and can crash. The fix is a NULL-argument check before calling bpf_jit_binary_free(), per the provided description. Public details...

CVE-2021-47485

CVE-2021-47485 affects the Linux kernel InfiniBand driver (IB/qib). The flaw is a buffer overflow in struct qib_user_sdma_pkt fields caused by arithmetic on user-controlled buffers (overflowing addrlimit or bytes_togo), which can lead to kernel memory corruption. The issue has been resolved by ad...

CVE-2021-47484

CVE-2021-47484 : The Linux kernel fix targets the octeontx2-af driver, addressing a possible null pointer dereference in rvu_debugfs.c and rvu_nix.c. The patch resolves a dereference path that could occur in the affected octeontx2 network/fabric handling. Connected documents confirm a corrected p...

CVE-2021-47483

CVE-2021-47483 affects the Linux kernel regmap subsystem (regcache_rbtree). The issue is a double-free in error handling when a reallocation fails, causing rbnode->block to reference freed memory. The fix moves the rbnode->block assignment to immediately after a successful reallocation, ens...

CVE-2021-47480

CVE-2021-47480 affects the Linux kernel SCSI subsystem. The issue arises when releasing a SCSI host: the low-level device driver (LLD) module could be unloaded before the SCSI host is fully released, because shost->hostt is needed during release, leading to a kernel panic (BUG: unable to handl...

CVE-2021-47479

The CVE-2021-47479 entry concerns the Linux kernel staging driver rtl8712 (rtl8712_dl_fw) with a use-after-free caused by a race between r871xu_dev_remove() and the ndo_open() callback. The issue arises when firmware is freed before the network device is unregistered, allowing the driver to acces...

CVE-2021-47476

CVE-2021-47476 : In the Linux kernel, the comedi driver for ni_usb6501 exposed a NULL-dereference/overflow risk in command paths due to endpoint-sized USB transfer buffers without proper size checks. Exploitation could occur if a malicious device reports smaller max-packet sizes than expected, af...

CVE-2021-47475

CVE-2021-47475 is a Linux kernel vulnerability in the comedi vmk80xx USB driver. The issue arises from transfer-buffer size checks: buffers were endpoint-sized and lacked validation, enabling overflows when a malicious device with larger max-packet sizes or unexpected accesses could write past th...

CVE-2024-5147

The WPZOOM Addons for Elementor Templates, Widgets plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.37 via the 'gridstyle' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server,...

CVE-2024-32988

'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered...

CVE-2024-2119

CVE-2024-2119 describes a Reflected XSS in the LuckyWP Table of Contents WordPress plugin. The vulnerability exists in the attrs parameter and affects all versions up to and including 2.1.4 due to insufficient input sanitization and output escaping. This can allow unauthenticated attackers to inj...

CVE-2024-2163

CVE-2024-2163 affects Ninja Beaver Add-ons for Beaver Builder (WordPress). The issue is stored Cross-Site Scripting via widget attributes (e.g., URLs) in the plugin’s widgets. It is exploitable by authenticated attackers with contributor-level permissions and above, allowing arbitrary scripts to ...

CVE-2024-3927

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Form Submission Admin Email Bypass in all versions up to, and including, 5.6.3. This is due to the plugin not properly checking for all variations of an...

CVE-2024-3198

The WP Font Awesome Share Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpfaisocial' shortcode in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2021-47439

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Added the condition for scheduling kszmibreadwork When the ksz module is installed and removed using rmmod, kernel crashes with null pointer dereferrence error. During rmmod, kszswitchremove function tries to...