2496 matches found
CVE-2024-53055 wifi: iwlwifi: mvm: fix 6 GHz scan construction
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6 GHz scan construction will loop forever since the loop variable has type u8,...
CVE-2024-11036: Improper Control of Generation of Code
The The GamiPress – The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via gamipressgetuserearnings AJAX action in all versions up to, and including, 7.1.5. This is due to the software allowing...
cifs: Fix buffer overflow when parsing NFS reparse points
...
HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities
Hewlett Packard Enterprise HPE has released security updates to address multiple vulnerabilities impacting Aruba Networking Access Point products, including two critical bugs that could result in unauthenticated command execution. The flaws affect Access Points running Instant AOS-8 and AOS-10 -...
CVE-2024-10187
CVE-2024-10187 affects the WordPress plugin myCred – Points Management System (Gamification). It enables Stored Cross-Site Scripting via the mycred_link shortcode due to insufficient input sanitization and output escaping on user-supplied attributes, affecting all versions up to 2.7.4. An attacke...
PT-2024-11916
CVE-20224-5209 CVE-2024-47460 Unauthenticated RCE in Aruba Access Points Specially crafted packets destined to the PAPI Aruba’s Access Point management protocol UDP port 8211, lead to privileged Remote Code Execution RCE. https://t.co/3cPBc1XA81...
CVE-2024-10187: Improper Neutralization of Input During Web Page Generation
The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycredlink shortcode in all version...
Cisco Unified Industrial Wireless Software Command Injection Vulnerability
Cisco Unified Industrial Wireless Software is a software provided by Cisco for industrial wireless networks. A command injection vulnerability exists in Cisco Unified Industrial Wireless Software. The vulnerability is caused due to improper validation of inputs to the web management interface of...
CVE-2024-20418
A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul URWB Access Points could allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating...
Cisco Unified Industrial Wireless Software 命令注入漏洞
Cisco Unified Industrial Wireless Software is a software provided by Cisco for industrial wireless networks. A command injection vulnerability exists in Cisco Unified Industrial Wireless Software. The vulnerability is caused due to improper validation of inputs to the web management interface of...
CVE-2024-20418: Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul URWB Access Points could allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating...
CVE-2024-50089
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2024-9194 · Aruba · Aruba Access Point
Name of the Vulnerable Software and Affected Versions: Aruba Access Points affected versions not specified Description: A command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI...
HPESBNW04722 rev.1 - HPE Aruba Networking Access Points Multiple Vulnerabilities
Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 260 Series Access Points : Please, refer to the vulnerability summary for affected versions Aruba 370 Series Access Points : Please, refer to the vulnerability...
SUSE CVE-2024-49969
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 color transformation This commit addresses a potential index out of bounds issue in the cm3helpertranslatecurvetohwformat function in the DCN30 color management module. The issue...
SUSE CVE-2024-49894
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of bounds issue in cmhelpertranslatecurvetodegammahwformat function. The issue could occur when the index 'i' exceeds the number of...
SUSE CVE-2024-49895
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation This commit addresses a potential index out of bounds issue in the cm3helpertranslatecurvetodegammahwformat function in the DCN30 color...
PT-2024-39436 · WordPress · Woocommerce Ups Shipping – Live Rates/Access Points
Name of the Vulnerable Software and Affected Versions: WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress versions up to, and including, 2.3.11 Description: The issue allows authenticated attackers with Subscriber-level access and above to delete the plugin's API key due...
CVE-2024-9109: Missing Authorization
The WooCommerce UPS Shipping – Live Rates and Access Points plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deleteoauthdata function in all versions up to, and including, 2.3.12. This makes it possible for authenticated attackers,...