Dokan Multivendor Marketplace Authorization Issues Vulnerability

The Dokan Multivendor Marketplace versions 5.2.1 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of validation for user control keys via the 'password' parameter, making it vulnerable to insecure direct object reference attacks. This could allow...

WordPress Premium Packages Cross-Site Script Vulnerabilities

WordPress Premium Packages 7.2.8 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'note' parameter input and inadequate escaping of output data. It results in a storage-type cross-site script attack. Attackers with...

WordPress Tourfic Cross-Site Script Vulnerability

WordPress Tourfic 3.0.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'type' parameter, which may lead to storage-type cross-site scripting attacks. Authentication attackers with contributor or...

WordPress: “Simply Schedule Appointments” app has a cross-site scripting vulnerability

WordPress versions prior to 1.6.12.35 have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the status parameter. It results in a stored-cross-site scripting attack, allowing unauthenticated attackers to inject arbitrary web...

ONTRAPORT PilotPress permission licensing and access control vulnerabilities

ONTRAPORT PilotPress versions 2.0.43 and earlier have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from the AJAX handler of updateccdetails, which forwards the username parameter provided by the attacker to ONTRAPORT before performing a conflict...

Surecart cross-site scripting vulnerabilities

Surecart versions 4.9.4 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the comment parameter, which may lead to stored-cross-site scripting attacks. Unauthenticated attackers can inject arbitrary web scripts...

WordPress Quick Paypal Payments Cross-Site Script Vulnerability

WordPress versions prior to 6.0.4 have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'form' parameter, allowing stored cross-site scripts to be executed by authenticated attackers with contributor or higher privileges...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: It is necessary to check that sock is valid before assigning it to iscsisetparam. The validity of sock should be checked before assigning it to prevent incorrect values. The change introduced in commit 57569c37f0a...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ptpqoriq: fix memory leak in probe Smatch complains that: drivers/ptp/ptpqoriq.c ptpqoriqprobe warn: ‘base’ from ioremap not released. Fix this by revising the parameter from ‘ptpqoriq-base’ to ‘base’. This is only a bug if...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: rcuscale: Move rcuscalewriter scheduletimeoutuninterruptible to idle The rcuscale.holdoff module parameter can be used to delay the start of rcuscalewriter kthread. However, the hung-task timeout will trigger when the timeout...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: fixed the null-ptr-deref issue in hugetlbfsParseParam Syzkaller reported a null-ptr-deref bug as follows: ====================================================== KASAN: null-ptr-deref in range...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL deref in cifscomposemountoptions The optional @ref parameter might contain a NULL nodename; therefore, prevent dereferencing it in cifscomposemountoptions. Addresses-Coverage: 1476408 “Explicit null dereference...

Astra Linux - vulnerability in pillow

Pillow 10.1.0 allows arbitrary code execution via the environment parameter using PIL.ImageMath.eval; this is a different vulnerability from CVE-2022-22817, which involved the expression parameter...

Astra Linux – Vulnerability in libjettison-java

It was discovered that Jettison before version 1.5.2 contained a stack overflow vulnerability through the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted string...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Astra Linux – Vulnerability in cjson

It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – added parameter checks for RSA. Requests with a source buffer size greater than the size of the key are rejected. This prevents potential integer underflow issues that might occur when copying the source scatterlist...

Astra Linux – Vulnerability in unbound

Unbound before version 1.9.5 allows an out-of-bounds write access in sldnsbgettokenpar. NOTE: The vendor denies that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fixed a kernel panic that occurs when the host sends an invalid H2C PDU length. If the host sends an H2CData command with an invalid DATAL value, the kernel may crash in the nvmettcpbuildpduiovec function. The...

Astra Linux – Vulnerability in Zabbix

A low-privilege regular Zabbix user with API access can exploit the SQL injection vulnerability in the include/classes/api/CApiService.php file to execute arbitrary SQL commands using the groupBy parameter...