WordPress Database Scanning For Malware Released in Wordfence CLI 5.0.1

Today we’re excited to announce the recent release of Wordfence CLI version 5.0.1 which includes a much requested feature from security analysts, hosting providers and ops teams: Database scanning for WordPress. Now you can scan any WordPress database you have access to for malware and...

CVE-2024-50153

In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in targetallocdevice There is a null-ptr-deref issue reported by KASAN: BUG: KASAN: null-ptr-deref in targetallocdevice+0xbc4/0xbe0 targetcoremod ... kasanreport+0xb9/0xf0...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a global out-of-bounds read issue in the net module, wwanrtnlpolicy, due to an overly large maxtype assigne...

CVE-2024-50079

In the Linux kernel, the following vulnerability has been resolved: iouring/sqpoll: ensure task state is TASKRUNNING when running taskwork When the sqpoll is exiting and cancels pending work items, it may need to run taskwork. If this happens from within iouringcancelgeneric, then it may be under...

CVE-2022-49005

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in sndsocputvolswsx needs to jus...

CVE-2022-49005

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not the usual one, max is the number of steps rather than the maximum value. This means that our check in sndsocputvolswsx needs to jus...

UBUNTU-CVE-2022-48997

In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpmpmsuspend with locks Currently tpm transactions are executed unconditionally in tpmpmsuspend function, which may lead to races with other tpm accessors in the system. Specifically, the hwrandom tpm driver...

CVE-2022-48951 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in sndsocputvolswsx The bounds checks in sndsocputvolswsx are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stere...

CVE-2022-48951 ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in sndsocputvolswsx The bounds checks in sndsocputvolswsx are only being applied to the first channel, meaning it is possible to write out of bounds values to the second channel in stere...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds checking issue in the sndsocputvolswsx function in the ASoC:ops subsystem...

PT-2024-10165 · Hitachi · Hitachi Ops Center Analyzer +1

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.3-00 Hitachi Infrastructure Analytics Advisor versions 2.1.0-00 through 4.4.0-00 Description: The issue is related to an authentication bypass, which may allow a remote attacker to...

Veeam B&R RCE vulnerability CVE-2024-40711 is exploited in attacks

Veeam B &R RCE vulnerability CVE-2024-40711is exploited in attacks. On September 24, there were no signs of this vulnerability being exploited in the wild. And on October 10, Sophos X-Ops reported that they had observed a series of attacks exploiting this vulnerability over the course of a month...

CVE-2024-48787

An issue in Revic Optics Revic Ops us.revic.revicops 1.12.5 allows a remote attacker to obtain sensitive information via the firmware update process...

Revic Optics Revic Ops 安全漏洞

Revic Optics Revic Ops is a free ballistic calculator from Revic Optics. A security vulnerability exists in Revic Optics Revic Ops version 1.12.5, which stems from the inclusion of a vulnerability that would allow a remote attacker to obtain sensitive information through the firmware update proce...

PT-2024-33221 · Revic Optics · Revic Ops

Name of the Vulnerable Software and Affected Versions: Revic Optics Revic Ops version 1.12.5 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.12.5, at the moment, there is no information about a newer...

CVE-2024-48787

An issue in Revic Optics Revic Ops us.revic.revicops 1.12.5 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48787

CVE-2024-48787 affects Revic Optics Revic Ops (us.revic.revicops) 1.12.5. The issue allows a remote attacker to obtain sensitive information via the firmware update process. Public sources in the provided documents consistently describe the vulnerability as an information disclosure during firmwa...

CVE-2024-48787

An issue in Revic Optics Revic Ops us.revic.revicops 1.12.5 allows a remote attacker to obtain sensitive information via the firmware update process...

File Permissions Vulnerability in Hitachi Ops Center Common Services

Overview File permissions vulnerability exists in Hitachi Ops Center Common Services. CVE-2024-2819: File permission vulnerability in Hitachi Ops Center Common Services Display new window Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer ...

SUSE CVE-2024-46824

In the Linux kernel, the following vulnerability has been resolved: iommufd: Require drivers to supply the cacheinvalidateuser ops If drivers don't do this then iommufd will oops invalidation ioctls with something like: Unable to handle kernel NULL pointer dereference at virtual address...