231584 matches found
CVE-2021-46978
CVE-2021-46978 : Linux kernel KVM nVMX fix for mapping eVMCS after migration. When enlightened VMCS is used and nested state is migrated via vmx_get_nested_state()/vmx_set_nested_state(), evmcs page could not be mapped immediately because evmcs GPA lacked the expected struct kvm_vmx_nested_state_...
CVE-2021-46979
CVE-2021-46979 : Linux kernel iio subsystem vulnerability where ioctl handlers were removed twice (during iio_device_unregister() and then inside iio_device_unregister_eventset()/iio_buffers_free_sysfs_and_mask()). This double removal could cause a double free leading to kernel panic. The issue i...
CVE-2020-36785
CVE-2020-36785 concerns the Linux kernel media/atomisp subsystem. The vulnerability arises from a use-after-free in atomisp_alloc_css_stat_bufs(), where the s3a_buf is freed along with items from asd->s3a_stats, causing a double free and use-after-free condition. The initial entry indicates th...
CVE-2020-36784
CVE-2020-36784 affects the Linux kernel i2c Cadence driver. The vulnerability arises because pm_runtime_get_sync incorrectly increments the PM usage counter even when the operation fails in cdns_i2c_master_xfer and cdns_reg_slave, causing a reference leak. The fix is to replace the finalization w...
CVE-2020-36782
CVE-2020-36782 covers a Linux kernel vulnerability in the I2C imx-lpi2c driver where the PM reference count could leak due to an unbalanced increment on return from pm_runtime_get_sync failures. The root cause is that pm_runtime_get_sync increments the PM usage count even when the operation fails...
CVE-2020-36783
CVE-2020-36783 is a Linux kernel I2C (img-scb) reference-count leak issue: pm_runtime_get_sync increments the PM reference count even on failure in img_i2c_xfer and img_i2c_init, leading to leaks. The fix replaces that return path with pm_runtime_resume_and_get to keep the usage counter balanced....
CVE-2020-36781
CVE-2020-36781: In the Linux kernel i2c: imx, a reference leak occurs when pm_runtime_get_sync returns (including failure). The leak happens because the PM runtime reference count is incremented on return from pm_runtime_get_sync, but code paths i2c_imx_xfer() and i2c_imx_remove() do not balance ...
CVE-2020-36780
Mode C: The CVE-2020-36780 issue concerns the Linux kernel i2c Sprd driver. The root cause is a reference leak where pm_runtime_get_sync increments the device PM reference count on return even when the operation failed, in sprd_i2c_master_xfer() and sprd_i2c_remove(). The fix replaces the increme...
CVE-2020-36779
CVE-2020-36779 affects the Linux kernel i2c stm32f7 driver. The issue is a PM reference leak where pm_runtime_get_sync increments the usage count on return even when it fails, in stm32f7_i2c_xx functions (local attack vector). The patch replaces the problematic path with pm_runtime_resume_and_get...
CVE-2020-36778
CVE-2020-36778 affects the Linux kernel i2c xiic subsystem. The issue is a reference leak in the PM runtime path: pm_runtime_get_sync incorrectly increments the PM usage count on return even when the operation fails, leading to a leak if the balanced put is forgotten. The fix replaces the final o...
CVE-2024-1943
CVE-2024-1943 affects the Yuki WordPress theme (up to version 1.3.14). The vulnerability is a Cross-Site Request Forgery due to missing/incorrect nonce validation in reset_customizer_options, allowing unauthenticated attackers to reset theme settings if they can lure an admin to click a forged li...
CVE-2024-1568
The CVE CVE-2024-1568 affects the Seraphinite Accelerator plugin for WordPress. It enables SSRF via OnAdminApi_HtmlCheck in all versions up to 2.20.52, allowing authenticated users with subscriber-level access or higher to issue web requests from the web application to arbitrary internal location...
CVE-2024-1388
CVE-2024-1388 affects the Yuki WordPress theme. Root cause: missing capability check in reset_customizer_options(), affecting all versions up to and including 1.3.13. Impact: authenticated users with subscriber+ can reset the theme settings, enabling unauthorized modification of data. Remediation...
Memory corruption
A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code...
Heap overflow
A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code...
CVE-2023-50737
CVE-2023-50737 describes an input validation vulnerability in the Lexmark printer SE menu. Affected product: Lexmark printers with the SE menu component. Root cause: a vulnerability in one of the SE menu routines allows an attacker to execute arbitrary code, potentially via network access. Impact...
CVE-2023-50735
Summary (CVE-2023-50735): A heap corruption vulnerability in the PostScript interpreter affects Lexmark devices. The issue can lead to arbitrary code execution and is described as exploitable remotely over a network with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.0)....
CVE-2023-50734
CVE-2023-50734 affects Lexmark printers where a buffer overflow in the PostScript interpreter could allow a remote attacker to execute arbitrary code. The vulnerability is exploitable over the network with no user interaction, and the impact is consistent with a remote code execution on affected ...
Cross site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273333...