6391 matches found
WordPress WP Job Board Pro plugin <= 1.2.76 - Unauthenticated Privilege Escalation via process_register vulnerability
Unauthenticated Privilege Escalation via processregister vulnerability discovered by Foxyyy in WordPress Plugin WP Job Board Pro versions = 1.2.76...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ionic: Fixed the issue where the netdev notifier was unregistered when the registernetdev function failed. If registernetdev fails, the driver leaks the netdev notifier. This issue is fixed by calling ioniclifunregister after a...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before registering the video device. video drvdata should be set before the video device is registered; otherwise, videodrvdata may return NULL in the open file operations, leading to errors...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock. A deadlock may occur because i3cmasterregister acquires &i3cbus-lock twice. See the log below. Use i3cdev-desc-info instead of calling...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ppdev: An error check was added in registerdevice. In registerdevice, the return value of idasimpleget is unchecked. In this case, idasimpleget will use an invalid index value. To address this issue, the index should be checked...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/entry32: CPU buffers are cleared after registers are restored during a NMI return. Currently, CPU buffers are cleared after a call to excnmi, but before the register state is restored. This may be acceptable for MDS mitigatio...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fixed a use-after-free bug in registerintccontroller In the error handling for this function, the variable d is freed without being removed from the intclist. This could lead to a use-after-free condition. To fix this...
Astra Linux – Vulnerability in symfony
symfony/runtime is a module for the Symphony PHP framework that enables decoupling PHP applications from global state. When the registerargvargc PHP directive is set to on, and users call any URL with a specially crafted query string, they can change the environment or debug mode used by the kern...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fixed the issue where sclpinit fails and does not clean up properly. If sclpinit fails, it only partially cleans up resources. If there are multiple failed calls to sclpinit, sclpstatechangeevent will be added multiple...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Fixed multiple calls to isoinit when debugfs is disabled. If bt DebugFS is not created successfully—which occurs if CONFIGDEBUGFS or CONFIGDEBUGFSALLOWALL is not set—then isoinit returns early without setting...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: igb: A potential invalid memory access issue has been fixed in igbinitmodule. The pciregisterdriver function may fail. When this occurs, the dcanotifier needs to be unregistered. Otherwise, the dcanotifier can be called when igb...
OESA-2025-1097 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when buffer offset is invalid I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This pat...
CVE-2024-25883
The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...
trojan 安全漏洞
trojan is a multi-user administration and deployment program by Jrohy Individual Developer, supporting web page administration. A security vulnerability exists in trojan versions v.2.0.0 through v.2.15.3, which is caused by elevation of privilege via the initialization interface /auth/register...
CVE-2024-25883
The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...
CVE-2024-25883
The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...
CVE-2024-25883
The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors...
CVE-2024-25883
CVE-2024-25883 affects the RSD project (rsd-devel) where the mstatus register update in commit 3d13a is incorrect, causing processing errors. The issue is described consistently across multiple databases, with no explicit exploitation details or fixes provided in the connected documents. The CVE ...