CVE-2023-52507

CVE-2023-52507 affects the Linux kernel NFC stack (nfc: nci) where the protocol is validated via a bitmask; the issue arises from an assertion that the requested protocol is below the maximum, preventing a potential shift-out-of-bounds and clarifying errors between undefined vs. unsupported proto...

CVE-2023-52505

CVE-2023-52505 affects the Linux kernel driver for lynx-28g PHYs. The issue arises when concurrent phy_set_mode_ext() calls target PCC-related protocol-converter registers (PCC8, PCCC, PCCD) across multiple lanes, risking hardware register corruption because lynx_28g_rmw() lacked locking. The fix...

CVE-2023-52502

CVE-2023-52502 affects the Linux kernel net: nfc stack, specifically the NFC LLCP path. The vulnerability is a race in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() that can lead to a Use-After-Free if a reference to a socket found during a lookup is taken after releasing a lock. A similar issue...

CVE-2023-52501

The connected MiracleLinux advisory confirms CVE-2023-52501 affects the Linux kernel ring-buffer code. The issue occurs when iterating a live ring buffer: if the last event sits at the end of a page with only 4 bytes left, the event length check can misread the length (first 4 bytes, or the lengt...

CVE-2023-52500

CVE-2023-52500 concerns the Linux kernel’s SCSI pm80xx driver. The issue was an information leakage risk where tags allocated for the OPC_INB_SET_CONTROLLER_CONFIG command were not freed when the response was processed, potentially exposing tag-related data. The connected advisories (e.g., Tencen...

CVE-2022-48627

CVE-2022-48627 (Linux kernel) describes a memory overlap bug in vt buffer character deletion caused by an overlapping copy when using scr_memcpyw, which may lead to data corruption or leakage if destination overlaps source. The issue is mitigated by replacing scr_memcpyw with scr_memmovew; severa...

CVE-2024-0795

CVE-2024-0795 describes a backend authentication/authorization flaw: if an attacker has admin or manager access, there is no backend check to prevent creating a new admin user, enabling privilege escalation. Multiple sources assign a high impact (CVSS ~7.2). The exact affected products/versions a...

Cross site scripting

The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘headingtitletag’ and ’headingsubtitletag’ parameters in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it...

CVE-2024-1449

CVE-2024-1449 relates to the Master Slider – Responsive Touch Slider WordPress plugin. It is vulnerable to a Stored Cross-Site Scripting (XSS) via the ms_slide shortcode in all versions up to and including 3.9.5, caused by insufficient input sanitization and output escaping on user-supplied attri...

CVE-2024-0378

CVE-2024-0378 affects the AI Engine plugin for WordPress, specifically versions up to and including 2.2.0. The issue is stored XSS caused by insufficient input sanitization and output escaping in the AI chat data when discussion tracking is enabled. Impact: unauthenticated attackers can inject sc...

CVE-2024-1775

CVE-2024-1775 details (mode C): The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the error_description parameter in all versions up to and including 3.1.12. The weakness arises from insufficient input sanitization and outp...

Input validation

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to...

Input validation

Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values...

CVE-2024-25064

CVE-2024-25064 concerns HikCentral Professional. Connected sources confirm the root cause as insufficient server-side validation that allows a login-privileged attacker to change parameter values and access resources they should not reach. Affected product is HikCentral Professional (prior to at ...

CVE-2024-25063

CVE-2024-25063 affects HikCentral Professional (Hikvision). The issue is due to insufficient server-side validation (inadequate access control), potentially allowing an attacker to access URLs they should not reach. Public references in connected documents point to HikCentral Professional up to v...

Cross site scripting

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...

Cross site scripting

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix a memory leak in error handling paths If 'vmbusestablishgpadl' fails, the recv|sendgpadl will not be updated and 'hvuiocleanup' in the error handling path will not be able to free the corresponding buffer. In su...

Null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ideapad-laptop: fix a NULL pointer dereference The third parameter of dytccqlcommand should not be NULL since it will be dereferenced immediately...

Unrestricted file upload

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...