CVE-2022-45352

CVE-2022-45352 concerns the WordPress theme/beTheme (Muffingroup Betheme) with a Missing Authorization / Broken Access Control vulnerability affecting Betheme versions up to 26.6.1. The issue allows unauthorized access to change plugin/theme settings (as described in Patchstack and PT-2024-11703 ...

CVE-2022-45349

CVE-2022-45349 concerns Muffingroup Betheme (WordPress theme) with a Missing Authorization/Broken Access Control vulnerability affecting versions up to 26.6.1. Multiple connected sources (Patchstack, PT Security, Red Hat, CVE records) indicate unauthenticated or low-privilege access could enable ...

CVE-2022-44626

CVE-2022-44626 corresponds to a missing/weak authorization (Broken Access Control) vulnerability in the WordPress plugin SEO Plugin by Squirrly SEO up to version 12.1.20 . The issue allows unauthorized access due to insufficient authorization checks in the plugin’s AJAX actions, affecting the plu...

CVE-2023-27608

The CVE-2023-27608 entry concerns WordPress Points and Rewards for WooCommerce (WP Swings)

CVE-2024-2864

Technical details about CVE-2024-2864 are not publicly provided in the supplied documents. No affected versions, root cause, exploit info, or remediation are present here. Monitor for updates.

CVE-2021-47177

CVE-2021-47177 is a kernel-level issue in the Linux IOMMU VT-d subsystem where iommu_device_sysfs_add() leaked sysfs state on error. The published description and connected advisories state that the leak occurs in alloc_iommu() and that the sysfs entry must be cleaned on subsequent errors; a fix ...

CVE-2021-47175

CVE-2021-47175: Linux kernel net/sched fq_pie OOB access in the traffic path (fq_pie_qdisc_enqueue). The issue manifests as slab-out-of-bounds read during packet enqueue, demonstrated by a kasan report when using tc with fq_pie. A fix was applied to the fq_pie path to prevent selecting an out-of-...

CVE-2021-47164

CVE-2021-47164 is a Linux kernel vulnerability fixed by correcting a NULL dereference in net/mlx5e related to lag device handling. Explanation: in bond_enslave(), the active/backup slave was set before the upper dev is assigned; a second event with an upper dev can occur, and if lag dev is NULL a...

CVE-2021-47160

CVE-2021-47160 corresponds to a Linux kernel vulnerability where PCR_MATRIX was set to all-ones when VLAN filtering was enabled and not reset when disabled, potentially allowing VLAN traffic leaks between bridges br0 and br1. The issue is addressed by removing the PCR_MATRIX write from mt7530_por...

CVE-2021-47158

The CVE-2021-47158 entry concerns the Linux kernel’s SJA1105 DSA driver (net: dsa: sja1105). The root cause is improper cleanup in sja1105_setup(): if one of the helper calls (sja1105_static_config_load(), sja1105_clocking_setup(), or sja1105_devlink_setup()) fails, memory could leak because the ...

CVE-2021-47152

CVE-2021-47152 refers to a Linux kernel fix for data stream corruption in the MPTCP path. The issue arises when mptcp_frag_can_collapse_to() incorrectly assumes only MPTCP uses a page_frag; if other protocols allocate fragments (e.g., plain TCP), memory can be re-used for mptcp_data_frag. The mit...

CVE-2021-47151

CVE-2021-47151 affects the Linux kernel interconnect: qcom bcm-voter code. The root cause is a missing of_node_put() in of_bcm_voter_get(), leading to a reference leak. This vulnerability pertains to the bcm-voter path within Qualcomm interconnect and can impact kernel reference handling. A patch...

CVE-2021-47145

CVE-2021-47145 affects the Linux kernel (btrfs) where a BUG_ON in link_to_fixup_dir can trigger a kernel panic during error paths in log recovery. The description shows a replay/recover flow (replay_one_buffer, btrfs_recover_log_trees, open_ctree) panicking with an invalid opcode in fs/btrfs/tree...

CVE-2021-47143

CVE-2021-47143 affects the Linux kernel net/smc subsystem. The root cause was missing cleanup when a smcd_dev device_add() failed, leaving the device in smcd_dev_list and later freeing it, causing a corrupted list. The fix adds error handling to remove the device from the list on device_add() fai...

CVE-2021-47139

CVE-2021-47139 affects the Linux kernel hns3 driver. A race occurs because the netdevice is registered before client initialization completes, creating a window where changes to channels or rx CPU map can trigger hns3_set_rx_cpu_rmap() twice, leading to a crash (BUG at lib/cpu_rmap.c). The fix, a...

CVE-2021-47138

In CVE-2021-47138, the Linux kernel cxgb4 driver is vulnerable because hardware registers for the server TID base can hold invalid values when the adapter is in a bad state (e.g., AER fatal error). Reading these values during filter clearing could cause out-of-bounds memory access. The fix uses t...

CVE-2021-47137

CVE-2021-47137 affects the Linux kernel, specifically the net/lantiq RX ring. When memory allocation or DMA mapping fails, an invalid address may be programmed into the descriptor, causing memory corruption. The patch fixes this by ensuring that, on allocation failure, DMA reuses the previous skb...

CVE-2024-24892

CVE-2024-24892 describes an OS command injection and privilege escalation in openEuler migration-tools (versions 1.0.0–1.0.1). The root cause is improper neutralization of elements used in OS commands, allowing remote command execution via an exposed interface, which can lead to high-severity imp...

CVE-2024-24899

CVE-2024-24899 affects openEuler aops-zeus versions 1.2.0–1.4.0, exposing OS command injection via the zeus/conf/constant.py (constant.Py) handling. The root cause is improper neutralization of special elements in commands, enabling a potential attacker to inject commands and impact confidentiali...

CVE-2024-24897

CVE-2024-24897 affects openEuler A-Tune-Collector (1.1.0-3 through 1.3.0). The root cause is improper neutralization of shell commands in sched.py when obtaining a process ID, enabling command injection and remote arbitrary command execution. Multiple connected sources (Red Hat, NVD/NVD-like entr...