6397 matches found
CVE-2024-45817
The CVE-2024-45817 entry concerns the Xen hypervisor on x86, where deadlock can occur in vlapic_error() when handling errors from the APIC status ring. The description states that error conditions are reported in a status register and that the OS may receive an interrupt for new errors; configuri...
SUSE CVE-2024-45817
In x86's APIC Advanced Programmable Interrupt Controller architecture, error conditions are reported in a status register. Furthermore, the OS can opt to receive an interrupt when a new error occurs. It is possible to configure the error interrupt with an illegal vector, which generates an error...
kernel: ptp: Fix possible memory leak in ptp_clock_register()
In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptpclockregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 size 8: comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 age 13.188s hex...
kernel: driver core: auxiliary bus: Fix memory leak when driver_register() fail
In the Linux kernel, the following vulnerability has been resolved: driver core: auxiliary bus: Fix memory leak when driverregister fail If driverregister returns with error we need to free the memory allocated for auxdrv-driver.name before returning from auxiliarydriverregister...
kernel: drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'
An out-of-bounds access flaw was found in drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c in the Linux kernel. This issue may lead to a crash...
kernel: ptp: Fix possible memory leak in ptp_clock_register()
In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptpclockregister I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 size 8: comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 age 13.188s hex...
kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init().
In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpcprocregister in nfsnetinit. syzkaller reported a warning 0 triggered while destroying immature netns. rpcprocregister was called in initnfsfs, but its error has been ignored since at least the initial comm...
UBUNTU-CVE-2024-46719
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsiregisteraltmode checks ISERR for the alt pointer and treats NULL as valid. When CONFIGTYPECDPALTMODE is not enabled, ucsiregisterdisplayport returns NULL which causes a...
CVE-2024-21743
Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez Login Register: from n/a through 3.2.5...
CVE-2024-21743 WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez Login Register: from n/a through 3.2.5...
CVE-2024-21743 WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability in favethemes Houzez Login Register houzez-login-register.This issue affects Houzez Login Register: from n/a through 3.2.5...
WordPress Houzez Login Register plugin <= 3.2.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Kursat Cetin in WordPress Plugin Houzez Login Register versions = 3.2.5...
WordPress Houzez Login Register Plugin <= 3.2.5 is vulnerable to Privilege Escalation
Software Houzez Login Register Type Plugin Vulnerable versions = 3.2.5 Fixed in 3.3.0 OWASP Top 10 A5: Security Misconfiguration Classification Privilege Escalation CVE CVE-2024-21743 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 864db44c0749 Credits luc Required...
PT-2024-19030 · WordPress · Houzez Login Register
Name of the Vulnerable Software and Affected Versions: Houzez Login Register versions 3.2.5 and earlier Description: A Privilege Escalation issue has been identified in the Houzez Login Register plugin. Recommendations: For Houzez Login Register versions 3.2.5 and earlier, update to a version tha...
CVE-2024-44430
SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortexlite/control/registercase.php interface...
CVE-2024-44430
SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortexlite/control/registercase.php interface...
Kortext Best Free Law Office Management Software 安全漏洞
Kortext Best Free Law Office Management Software is a law office management software from Kortext. A security vulnerability exists in Kortext Best Free Law Office Management Software version v1.0, which stems from a sensitive information disclosure issue in the kortexlite/control/registercase.php...
EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-2394)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel:ACPI: CPPC: Use accesswidth over bitwidth for system memory accessesCVE-2024-35995 ACPI: LPIT: Avoid u32 multiplication...