Lucene search
+L

2240 matches found

Patchstack
Patchstack
added 2024/10/09 12:00 a.m.25 views

WordPress Responsive Poll Plugin <= 2.3.9 is vulnerable to SQL Injection

Software Responsive Poll Type Plugin Vulnerable versions = 2.3.9 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-9022 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 2e687784b00a Credits WordFence Required privilege Administrator Published...

7.2CVSS7.2AI score0.02323EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.22 views

The vulnerability of the io_uring/poll component in the Linux operating system’s kernel allows for a malfunction to occur, leading to service failure.

The vulnerability of the iouring/poll component in the Linux operating system’s kernel is related to the state of the race condition during multi-address request operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References9Affected Software3
Talos Blog
Talos Blog
added 2024/09/19 6:00 p.m.39 views

Talk of election security is good, but we still need more money to solve the problem

Last week, six Secretaries of State testified to U.S. Congress about the current state of election security ahead of November's Presidential election. Some of the same topics came up as usual -- disinformation campaigns, influence from foreign actors, and the physical protection of poll workers o...

7.5CVSS8.9AI score0.04469EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/09/14 2:51 a.m.7 views

SUSE CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

4.3CVSS6.5AI score0.00245EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2024/09/13 11:41 a.m.21 views

CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS6.8AI score0.00245EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/13 6:15 a.m.18 views

AZL-49582 CVE-2024-46676 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS6.3AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/13 6:15 a.m.7 views

DEBIAN-CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS5.7AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/13 6:15 a.m.12 views

UBUNTU-CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS6.2AI score0.00245EPSS
SaveExploits0References26
Debian CVE
Debian CVE
added 2024/09/13 5:29 a.m.17 views

CVE-2024-46676

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of improtocols value is 1 and tmprotocols value is 0 this combination successfully passes the check 'if !improtocols && !tmprotocols' in the nfcstartpoll. But then after...

5.5CVSS5.7AI score0.00245EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2024/09/07 3:38 a.m.9 views

SUSE CVE-2023-52914

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: add hash if ready poll request can't complete inline If we don't, then we may lose access to it completely, leading to a request leak. This will eventually stall the ring exit process as well...

5.5CVSS6.5AI score0.00205EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2024/09/04 12:32 a.m.13 views

kernel: ionic: fix use after netif_napi_del()

A vulnerability was found in the Linux kernel's Ionic driver in the ionicqcqenable function, where the issue arises when the driver fails to reset the .poll pointer to NULL after a queue is unregistered via netifnapidel, leading to a use-after-free scenario when attempting to enable a previously...

7.8CVSS7.2AI score0.00307EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/09/04 12:15 a.m.11 views

kernel: ionic: fix use after netif_napi_del()

A vulnerability was found in the Linux kernel's Ionic driver in the ionicqcqenable function, where the issue arises when the driver fails to reset the .poll pointer to NULL after a queue is unregistered via netifnapidel, leading to a use-after-free scenario when attempting to enable a previously...

7.8CVSS7.2AI score0.00307EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/09/03 3:48 p.m.11 views

kernel: ionic: fix use after netif_napi_del()

A vulnerability was found in the Linux kernel's Ionic driver in the ionicqcqenable function, where the issue arises when the driver fails to reset the .poll pointer to NULL after a queue is unregistered via netifnapidel, leading to a use-after-free scenario when attempting to enable a previously...

7.8CVSS7.2AI score0.00307EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/26 6:15 p.m.20 views

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

9.8CVSS6.1AI score0.01045EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/26 6:15 p.m.27 views

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

9.8CVSS0.01045EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/26 12:00 a.m.68 views

CVE-2024-45265

CVE-2024-45265 affects SkySystem Arfa-CMS before 5.1.3124. The vulnerability is a SQL injection in the poll component, exploitable via the psid parameter to allow remote attackers to execute arbitrary SQL commands. Root cause is improper handling of user-supplied psid data in the poll module, lea...

9.8CVSS8.7AI score0.01045EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/26 12:00 a.m.41 views

CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter...

0.01045EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/26 12:00 a.m.19 views

PT-2024-31522 · Skysystem · Arfa-Cms

Name of the Vulnerable Software and Affected Versions: SkySystem Arfa-CMS versions prior to 5.1.3124 Description: A SQL injection issue in the poll component allows remote attackers to execute arbitrary SQL commands via the psid parameter. This enables attackers to manipulate database queries,...

9.8CVSS9.1AI score0.01045EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2024/08/22 3:14 a.m.6 views

SUSE CVE-2023-52895

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: don't reissue in case of poll race on multishot request A previous commit fixed a poll race that can occur, but it's only applicable for multishot requests. For a multishot request, we can safely ignore a spurious...

5.5CVSS6.4AI score0.00205EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2024/08/21 7:40 p.m.25 views

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

2.3CVSS6.8AI score0.0021EPSS
SaveExploits0References4
Rows per page
Query Builder