PT-2022-30623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a refcount problem in the atmel nand controller init function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior ...

PT-2022-30090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a PCI-E clock problem in the Linux Kernel, specifically affecting the qcom: ipq8074 component. The actual impact and potential for attack have not been fully determine...

CVE-2014-9511

Summary: CVE-2014-9511 maps to a WordPress vulnerability in the Sell Downloads plugin (versions ≤ 1.0.1). The issue arises from a lack of input sanitization, allowing an attacker to disclose arbitrary files on the server by accessing them through the web context. This can lead to exposure of serv...

CVE-2020-24230

This CVE entry maps to a CSRF vulnerability in the WordPress Patreon plugin (versions ≤ 1.6.9). The flaw allows an attacker to overwrite or create user meta via CSRF, enabling unauthorized changes to user metadata. Impact is tied to insufficient request authentication for certain actions, as desc...

CVE-2021-29232

Summary: Multiple connected sources confirm a concrete vulnerability in WordPress Simple Membership plugin (versions ≤ 4.0.3; remediation to at least 4.0.4) enabling authenticated SQL injection from the admin backend. Affected component: WordPress Simple Membership plugin, backend/admin queries. ...

CVE-2021-25632

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-19233

The connected OpenVAS/Mageia OSV/OSVDB entries document CVEs related to sudo in CVE-2019-19232 and CVE-2019-19234. The advisory MGASA-2020-0246 explains that sudo could run commands with unknown user/group ids when configured with aliases like ALL, potentially letting sudo impersonate non-existen...

CVE-2017-10516

CVE-2017-10516 is linked to a cross-site scripting (XSS) vulnerability in Pallets Werkzeug prior to 0.11.11. The issue resides in the render_full function within the debug/tbtools.py debugger, allowing remote attackers to inject arbitrary script/HTML via an exception message. Affected product/ver...

CVE-2014-1197

CVE-2014-1197 concerns GNU Cpio 2.11 where the --no-absolute-filenames option can be bypassed via symlinks during extraction, allowing rogue archives to write files outside the current directory. Mageia MGASA-2015-0080 documents this issue (CVE-2014-1197) and references a fix in updated cpio pack...

CVE-2018-1832

IBM Event Streams 2018.3.0 and 2018.3.1 are affected by CVE-2018-1832, where a remote attacker could bypass security restrictions by modifying the UI session cookie after authentication, potentially exposing user and session data during an encrypted session. The remediation is to upgrade to IBM E...

CVE-2022-1280

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

CVE-2022-1280

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

Design/Logic Flaw

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

CVE-2022-1280

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak...

WordPress Download Manager plugin encryption problem vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Download Manager plugin version 3.2.39...

CVE-2022-1280

A use-after-free vulnerability was found in drmleaseheld in drivers/gpu/drm/drmlease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service DoS or a kernel information leak. Mitigation Mitigation for this issue is either not...

Cross Site Scripting (XSS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Web Extension Required error when launching resources via HTML5 mode

You are not able to launch resources apps or desktops from browser due to a lack of web extension. If you see this modal dialog and are not able to launch application protected resource...

"Unable to Launch Resource" error while switching to HTML5 client

With App protection enabled, if you switch to HTML5 client mid-way into the session/ beginning of the session all the protected and unprotected apps will be enumerated but when you click on launching the session, the below message will appear,which will lead to this document...

WordPress Material Design for Contact Form plugin拒绝服务漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Material Design for Contact Form plugin suffers from a denial of service vulnerability that stems from a plugin validatio...