CVE-2023-51486

Technical details (affected plugin version, root cause, exploit vector, impact, and fixes) for CVE-2023-51486 are not provided in the supplied documents. Monitor official advisories for updates.

CVE-2023-51487

CVE-2023-51487 is a CSRF vulnerability in the ARI Stream Quiz WordPress plugin, affecting ARI Stream Quiz versions up to 1.2.32. The connected documents confirm the issue exists and reference CSRF as the vulnerability type, but do not provide an explicit fixed version or patch details. Affected p...

CVE-2023-51491

CVE-2023-51491 – WordPress Depicter Slider plugin

CVE-2023-51510

CVE-2023-51510 is a CSRF vulnerability affecting Atlas Gondal’s WordPress Export Media URLs plugin (versions up to 1.0). Public docs in NVD list a high-severity CVSS v3.1 base score of 8.8, implying potential impact on confidentiality, integrity, and availability, but the connected sources do not...

CVE-2023-51521

CVE-2023-51521: CSRF in ExpressTech Quiz And Survey Master (WordPress plugin) affecting versions up to 8.1.18. CVSS v3.1 base score 5.4 (Medium). No exploitation details publicly documented in the provided sources. Remediation: update to a version later than 8.1.18 (per PT-2024-14175 guidance).

CVE-2023-51407

CVE-2023-51407 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin "Split Test For Elementor" (Rocket Elements). Affected versions are up to 1.6.9. The issue could enable unauthorized actions on behalf of a user. Remediation: upgrade to a version later than 1.6.9. Additio...

CVE-2024-28070

Mitel MiContact Center Business

CVE-2024-22513

The CVE-2024-22513 vulnerability affects djangorestframework-simplejwt up to and including 5.3.1, where information disclosure can occur because the for_user validation path is missing for inactive users. Multiple connected advisories confirm the issue and link it to inactive-user access of resou...

CVE-2024-28640

The CVE-2024-28640 entry concerns TOTOLink X5000R (v9.1.0u.6118-B20201102) and A7000R (v9.1.0u.6115-B20201022). Affected component: the command field in the device UI/processing path suffers a Buffer Overflow, enabling a remote attacker to cause a Denial of Service. The reports consistently descr...

CVE-2024-28069

CVE-2024-28069 concerns Mitel MiContact Center Business (legacy chat component) up to version 10.0.0.4. The vulnerability allows an unauthenticated attacker to perform information disclosure due to improper configuration, enabling access to sensitive data and potentially unauthorized actions with...

CVE-2024-28862

The CVE-2024-28862 entry concerns the Ruby One Time Password library (ROTP). Affected versions had overly permissive default file permissions (0666) on Ruby .rb files, enabling potential local access/impact due to insecure permissions. The advisory advises upgrading to version 6.3.0; if patching ...

CVE-2024-23298

CVE-2024-23298 affects Apple Xcode (prior to version 15.3). The issue is described as a logic problem in state management that enables Gatekeeper bypass. Multiple connected sources corroborate a local/remote-leaning impact tied to Gatekeeper checks being bypassed, with Apple noting the fix in Xco...

CVE-2021-47135

CVE-2021-47135 relates to the Linux kernel mt76 mt7921 driver. Public docs show a fix for an AOOB/array-out-of-bounds issue in mt7921_mcu_tx_rate_report and removal of an unnecessary variable, addressing an out-of-bounds access. References point to upstream stable commits (d874e6c069… and 6919e8a...

CVE-2021-47133

CVE-2021-47133 affects Linux kernel; memory leak in the amd_sfh driver (HID: amd_sfh: Fix memory leak in amd_sfh_work) detected by kmemleak. Root cause: unreferenced kmem object in request_list handling; fix implemented as freeing the request_list entry once the processed entry is removed from th...

CVE-2021-47132

CVE-2021-47132 refers to a Linux kernel issue in the MPTCP code where sk_forward_memory could be corrupted during retransmission due to unsafe updates that did not acquire the msk spin lock. A fix was introduced that adds a new variant of the blamed function which explicitly acquires the msk spin...

CVE-2021-47129

CVE-2021-47129 relates to Linux kernel netfilter nft_ct: nft_ct_expect_obj_eval() calls nf_ct_ext_add() for confirmed conntrack entries, but nf_ct_ext_add() requires !nf_ct_is_confirmed(), causing skip of extensions on confirmed conntrack. A fix described in connected docs is to add the ct helper...

CVE-2021-47127

CVE-2021-47127: The Linux kernel AF_XDP copy-mode Tx regression (introduced by commit that removed xsk_buff_pool from VSI) is fixed by adding a bitmap of zero-copy queues. Each bit corresponds to a queue where an xsk pool is configured; the bitmap is updated in ice_xsk_pool_en/disable and consult...

CVE-2021-47123

CVE-2021-47123 concerns a Linux kernel use-after-free risk caused by an io_uring timeout path: a double free can occur if a linked timeout is not removed from the master request link list, potentially leading to use-after-free scenarios. The description states the fix is to always remove linked t...

CVE-2021-47117

Technical details about CVE-2021-47117 are not provided in the connected documents. The initial description mentions ext4/extents_status and a kernel patch, but no explicit vendor/product/version mappings or remediation specifics are given in the supplied sources.

CVE-2021-47116

CVE-2021-47116 concerns the Linux kernel ext4 memory leak. According to the primary description, the vulnerability is triggered when memory leaks on the error path of ext4_mb_init_backend, occurring if a filesystem is corrupted with an illegally large s_log_groups_per_flex. The issue is resolved ...