30770 matches found
CVE-2024-21539
Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...
CVE-2024-21539
Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this vulnerability...
pcp security update
6.2.2-7 - Fix buffer sizing checks in pmstore PDU handling RHEL-57809 - Guard against symlink attacks in pmpost program RHEL-57814 - Fix libpcpweb webgroup slow request refcounting RHEL-58307 - Updated pmdahacluster for newer crmmon versions RHEL-58303...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing lock causing a program to hang...
CVE-2024-52386 WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through = 3.1.16...
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2024-45320)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by an attack...
PT-2024-18951
Name of the Vulnerable Software and Affected Versions @eslint/plugin-kit versions prior to 0.2.3 Description The issue is related to Regular Expression Denial of Service ReDoS due to improper input sanitization. An attacker can increase the CPU usage and crash the program by exploiting this...
CVE-2024-52381
CVE-2024-52381 affects the ZIJ KART WordPress plugin (versions
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to program to a crash. This issue occurs because code execution is not discarded as consequence...
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to program to a crash. This issue occurs because code execution is not discarded as consequence...
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to program to a crash. This issue occurs because code execution is not discarded as consequence...
TCL Camera 安全漏洞
TCL Camera is a camera driver application from the Chinese company TCL. A security vulnerability exists in TCL Camera, which stems from exposing a provider program that is vulnerable to a path traversal vulnerability...
Wrap Up the Year with the Biggest Scope and Rewards Yet: Join the Wordfence Bug Bounty Program End of Year Holiday Extravaganza!
The holidays are here, and so is your chance to earn big while helping secure the WordPress ecosystem! For all submissions to our Bug Bounty Program from November 12, 2024, to December 9, 2024 , we’re rolling out our End of Year Holiday Extravaganza promotion to give back to our security...
kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPFPROGTYPECGROUPSKB attach type enforcement in BPFLINKCREATE bpfprogattach uses attachtypetoprogtype to enforce proper attach type for BPFPROGTYPECGROUPSKB. linkcreate uses bpfprogget and relies on...
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence...
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash
A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to program to a crash. This issue occurs because code execution is not discarded as consequence...
Intel CIP 安全漏洞
Intel CIP is an Improvement Program program from Intel Corporation USA. A security vulnerability exists in Intel CIP versions prior to 2.4.10852. An attacker can exploit the vulnerability to elevate privileges...
Intel CIP 输入验证错误漏洞
Intel CIP is an Improvement Program program from Intel Corporation USA. An input validation error vulnerability exists in Intel CIP versions prior to 2.4.10852, which stems from incorrect input validation. An attacker can exploit the vulnerability to elevate privileges...
kernel: powerpc/64s: fix program check interrupt emergency stack path
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping into a 3: label inside the GENCOMMONBODY macro for the normal path after it had finished, rather than jumping over it. By a small...
