CVE-2024-53164 net: sched: fix ordering of qlen adjustment

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch-q.qlen around qdisctreereducebacklog need to happen before a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become...

CVE-2024-54409

Cross-Site Request Forgery CSRF vulnerability in fzmaster XPD Reduce Image Filesize xpd-reduce-image-filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through = 1.0...

CVE-2024-54409 WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fzmaster @ XPD XPD Reduce Image Filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through 1.0...

CVE-2024-54409 WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in fzmaster XPD Reduce Image Filesize xpd-reduce-image-filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through = 1.0...

CVE-2024-54409

CVE-2024-54409 is a CSRF vulnerability in the WordPress plugin XPD Reduce Image Filesize (also noted as XPD XPD Reduce Image Filesize) that enables a Stored XSS when exploited. The initial record lists affected versions as from n/a through 1.0, with a CVSSv3.1 base score of 7.1 (HIGH) , attack ve...

WordPress plugin XPD Reduce Image Filesize 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-36296 · Unknown · Xpd Reduce Image Filesize

Name of the Vulnerable Software and Affected Versions: XPD Reduce Image Filesize versions n/a through 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...

CVE-2024-54409: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in fzmaster XPD Reduce Image Filesize xpd-reduce-image-filesize allows Stored XSS.This issue affects XPD Reduce Image Filesize: from n/a through = 1.0...

WordPress XPD Reduce Image Filesize plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin XPD Reduce Image Filesize versions = 1.0...

PT-2024-35609

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel's network scheduling subsystem, specifically the qdisc tree reduce backlog function. Changes to sch-q.qlen around this function need to occur before the...

SUSE CVE-2024-53057

In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisctreereducebacklog on TCHROOT In qdisctreereducebacklog, Qdiscs with major handle ffff: are assumed to be either root or ingress. This assumption is bogus since it's valid to create egress qdiscs with major...

AZL-53921 CVE-2024-53057 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisctreereducebacklog on TCHROOT In qdisctreereducebacklog, Qdiscs with major handle ffff: are assumed to be either root or ingress. This assumption is bogus since it's valid to create egress qdiscs with major...

PT-2024-9881

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the qdisc tree reduce backlog function of the Linux kernel. This can lead to a denial of service. The problem arise...

5 Ways to Reduce SaaS Security Risks

As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack surface, much of which is often unknown or unmanaged. This greatly increases the risk of identity-based...

CVE-2024-43876

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar: Demote WARN to devwarnratelimited in rcarpciewakeup Avoid large backtrace, it is sufficient to warn the user that there has been a link problem. Either the link has failed and the system is in need of maintenance, or t...

CVE-2024-36573

The almela obx library (versions prior to v.0.0.4 ) is vulnerable to a Prototype Pollution issue. The flaw originates from improper handling of JavaScript object prototypes within the index.js file, specifically affecting the reduce function at @almela/obx/build/index.js:470 and the Object.set co...

obx Security Vulnerabilities

obx is a fast and lightweight object manipulation library for Javascript by the individual developer Gaetan Almela. A security vulnerability exists in obx prior to version v.0.0.4, which originates from a vulnerability that allows arbitrary code execution via the obx/build/index.js, reduce, and...

obx Prototype Pollution

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656, reduce @almela/obx/build/index.js:470, Object.set obx/build/index.js:269 component...

DEBIAN-CVE-2021-47529

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur invalid TLV len or memory allocation failure, the memory already allocated in 'reducepowerdata' should be freed before returning, otherwise it is leaking...

UBUNTU-CVE-2021-47529

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur invalid TLV len or memory allocation failure, the memory already allocated in 'reducepowerdata' should be freed before returning, otherwise it is leaking...