DEBIAN-CVE-2024-53165

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

CVE-2024-53165

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

UBUNTU-CVE-2024-53165

In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this function, d is freed without ever removing it from intclist which would lead to a use after free. To fix this, let's only add it to the lis...

PT-2024-35662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when the register sysctl function returns NULL, causing svc rdma proc cleanup to fail in destroying the percpu counters initialized in svc rdma proc init. This can lead ...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory movement issue in the register pool in the drm/xe/regsr subsystem...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a debug register in the drm/vc4:hdmi module that may cause the system to hang when it hangs...

CVE-2024-53153

In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...

CVE-2024-53153 PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()

In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...

Command Injection

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Command Injection due to the PHP registerargcargv configuration setting. An attacker can execute arbitrary code by manipulating the command line arguments. Note: This is only exploitable if t...

kernel: stm class: Fix a double free in stm_register_device()

A vulnerability was found in the Linux kernel's stm class, where an improper memory management sequence in stmregisterdevice could lead to a double-free error. This issue occurs when the putdevice&stm-dev call triggers stmdevicerelease to free "stm", making the subsequent vfreestm call redundant...

PT-2024-17651

Name of the Vulnerable Software and Affected Versions Peter’s Custom Anti-Spam plugin for WordPress versions up to, and including, 3.2.3 Description The issue is due to missing nonce validation on the cas register post function, making it possible for unauthenticated attackers to blacklist emails...

PT-2025-3639

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-06316-g7f63786ad3d1-dirty Description The issue is related to a NULL pointer dereference in the tcpci irq function when handling shared interrupts. This can occur when two Type-C ports share an...

WordPress plugin Peter’s Custom Anti-Spam has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Craft CMS code injection vulnerability

Craft CMS is a user-friendly, web-based content management system for creating and managing website content. Craft CMS has a security vulnerability due to the opening of registerargcargv in the PHP configuration, which can be exploited by an attacker to execute arbitrary code and take control of...

WordPress Peter’s Custom Anti-Spam plugin <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function vulnerability

Cross-Site Request Forgery via casregisterpost Function vulnerability discovered by SOPROBRO in WordPress Plugin Peter’s Custom Anti-Spam versions = 3.2.3...

CVE-2024-54363

Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...

CVE-2024-54363: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...

PT-2024-36249 · WordPress · Wp Nssuser Register

Name of the Vulnerable Software and Affected Versions: Wp NssUser Register versions n/a through 1.0.0 Description: The issue is related to an incorrect privilege assignment in the nssTheme Wp NssUser Register, allowing privilege escalation. Recommendations: For versions n/a through 1.0.0, at the...

WordPress plugin Wp NssUser Register has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-16542

Name of the Vulnerable Software and Affected Versions MainWP Child plugin versions prior to 5.3 Description The MainWP Child plugin for WordPress is vulnerable to privilege escalation due to a missing authorization check on the register site function when a site is left in an unconfigured state...