1548 matches found
Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sizet-to-int conversion vulnerability in the filesystem layer CVE-2021-33909 kernel: race condition for removal of the HCI controller CVE-2021-32399 For more details about the security...
kernel security and bug fix update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
WordPress WP Offload SES Lite plugin cross-site scripting vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Offload SES Lite plugin prior to version 1.4.5...
CVE-2021-24494
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the...
CVE-2021-24494
CVE-2021-24494 affects the WordPress plugin WP Offload SES Lite (before 1.4.5). The vulnerability stems from not escaping certain fields on the Activity page of the admin dashboard (e.g., email id, subject, recipient), allowing a Stored XSS when an attacker can control those fields (for example v...
PT-2021-16017
Name of the Vulnerable Software and Affected Versions WP Offload SES Lite WordPress plugin versions prior to 1.4.5 Description The issue arises from the failure to escape certain fields in the Activity page of the admin dashboard, such as the email's id, subject, and recipient. This oversight cou...
CVE-2021-24494: Improper Neutralization of Input During Web Page Generation
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the...
WordPress 插件跨站脚本漏洞
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Offload SES Lite plugin prior to version 1.4.5...
WordPress WP Offload SES Lite plugin <= 1.4.4 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Ionut Morosan in WordPress WP Offload SES Lite plugin versions = 1.4.4. Solution Update the WordPress WP Offload SES Lite plugin to the latest available version at least 1.4.5...
WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
The plugin did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for exampl...
UVI-2021-1000802 sch_htb: fix refcount leak in htb_parent_to_leaf_offload
schhtb: fix refcount leak in htbparenttoleafoffload This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.10 by commit...
PT-2021-25273
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.12.9 Description: A refcount leak was discovered in the htb parent to leaf offload function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...
PT-2021-29267
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.9 Description A refcount leak was discovered in the htb parent to leaf offload function. The issue was introduced in version v5.12 and is fixed in version v5.12.10. The actual impact and attack...
The vulnerability in the implementation of the Generic Receive Offload (GRO) kernel of the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s Generic Receive Offload GRO kernel lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-11177 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the htb parent to leaf offload function. The commit ae81feb7338c, which aimed to fix a NULL pointer...
PT-2024-11181 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs when a netdev with active TLS offload goes down, and the TLS context is deallocated, but the sock...
Failed to publish image with platform layer if offload Compositing feature is enabled.
When offload Compositing feature is enabled, you may failed to publish image, which contains a platform layer. ELM log shows the following error: "An unexpected error occurred; export the log files and notify Technical Support that this error occurred."...
App Layering 2011 : After ELM Upgrade to 2011 from 2005, adding layer version gives "The issuing certificate does not have a usable private key."
--after upgrading ELM from 2005 to 2011 -- getting an error when we try to add a version to a layer "The issuing certificate does not have a usable private key." -- have offload compositing enabled on vCentre connectors...
openSUSE Security Update : gcc7 (openSUSE-2020-2301)
This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...