OESA-2024-2519 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set When enabling access to the special register set, Receiver time-out and RHR interrupts can...

WordPress plugin Pie Register Premium 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-35937 · Unknown · Pie Register Premium

Name of the Vulnerable Software and Affected Versions: Pie Register Premium versions prior to 3.8.3.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...

WordPress Pie Register (Add on) - Social Sites Login plugin <= 1.7.9 - Authentication Bypass vulnerability

WordPress Pie Register Add on - Social Sites Login plugin = 1.7.9 - Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin Pie Register Add on - Social Sites Login versions = 1.7.9...

WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Pie Register Premium versions 3.8.3.3...

CVE-2024-33044

CVE-2024-33044 involves memory corruption in Qualcomm closed‑source components triggered by improper configuration of the SMR/S2CR registers when operating in bypass mode. The vulnerability targets the handling of SMR/S2CR, and root cause is memory corruption due to bypass configuration. Impact i...

CVE-2024-33044 Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode...

CVE-2024-11744

A vulnerability has been found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /register.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely...

kernel: media: edia: dvbdev: fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: media: edia: dvbdev: fix a use-after-free In dvbregisterdevice, pdvbdev is set equal to dvbdev, which is freed in several error-handling paths. However, pdvbdev is not set to NULL after dvbdev's deallocation, causing...

CVE-2024-11678

A vulnerability was found in CodeAstro Hospital Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /backend/doc/hisdocregisterpatient.php. The manipulation of the argument...

CVE-2024-11675

A vulnerability has been found in CodeAstro Hospital Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /backend/admin/hisadminregisterpatient.php of the component Add Patient Details Page. The manipulation of the argument...

kernel: bpf: Fix crash due to out of bounds access into reg2btf_ids.

bpf in linux kernel incorrectly managed register types, leading to out of bounds access and possible kernel crashing when bad pointer gets dereferenced...

PT-2024-17226 · Unknown · 1000 Projects Portfolio Management System Mca

Name of the Vulnerable Software and Affected Versions: 1000 Projects Portfolio Management System MCA version 1.0 Description: A critical issue has been found in the /register.php file, affecting an unknown functionality. The manipulation of the argument name leads to SQL injection. This can be...

OESA-2024-2448 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

OESA-2024-2447 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump history to record instructions that performed register spill/fi...

Malicious code in vite-plugin-unus-api-register (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79ccf9234ae6ea621dca31ab486d57d162d4c344342f26de0924579cb3b2d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-10393

CVE-2024-10393 affects the WordPress Tutor LMS plugin, vulnerable in versions

PT-2024-17023 · Unknown · Code4Berry Decoration Management System

Name of the Vulnerable Software and Affected Versions: Code4Berry Decoration Management System version 1.0 Description: A critical issue has been found in the Code4Berry Decoration Management System, affecting some unknown functionality of the file /decoration/admin/userregister.php of the...

AZL-53840 CVE-2024-53063 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...