DEBIAN-CVE-2024-27032

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

UBUNTU-CVE-2024-27032

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULTBLOCK is on, it is possible that f2fsreservenewblock will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 a...

CVE-2022-48664

A vulnerability was found in the btrfs filesystem in the Linux kernel. This issue can cause a system hang during the unmount process if the space reclaim worker is not properly stopped, possibly leading to system instability. Mitigation Mitigation for this issue is either not available or the...

CVE-2022-48664 btrfs: fix hang during unmount when stopping a space reclaim worker

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running generic/562 from fstests we can hang during unmount, resulting in a trace like this: Sep 07 11:52:00 debian9 unknown: run fstests generic/562 ...

CVE-2024-25917

CVE-2024-25917 affects the WordPress WP Setup Wizard plugin prior to version 1.0.8.2, exposing an authentication/authorization bypass that allows an authenticated subscriber or higher to perform an unauthenticated-like action: full database download. Root cause identified as a missing capability ...

CVE-2024-32579

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: from n/a through 2.4.1...

CVE-2024-32579

Technical details about CVE-2024-32579 are not publicly provided in the supplied documents. Current data confirms a Stored XSS issue in GloriaFood plugin versions up to 2.4.1; monitor for official advisories and patches.

CVE-2023-51418

CVE-2023-51418 affects the JVM Gutenberg Rich Text Icons WordPress plugin. Public docs show a Missing Authorization vulnerability that enables authenticated users to perform unauthorized actions, including directory traversal leading to Arbitrary File Deletion or similar file operations, impactin...

PT-2024-26837

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a missing lock in the hugetlb code, which can be triggered in an userfault context. This occurs when two threads modify the resv map together, going into an...

WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by wpdabh Patchstack Alliance in WordPress Plugin Restaurant Menu – Food Ordering System – Table Reservation versions = 2.4.1...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32579 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e783a9e89164...

CVE-2024-31385

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385

Technical details about CVE-2024-31385 (affected version, root cause, exploitability, fix) are not provided in the connected documents. The initial description notes a CSRF issue in ReDi Restaurant Reservation; monitor for official advisories for specifics.

CVE-2024-1755

CVE-2024-1755 affects the WordPress plugin “NPS computy” up to version 2.7.5, where missing CSRF checks in certain code paths could allow an attacker to cause logged-in users to perform unintended actions. The issue is documented as CSRF across multiple sources, with a remediation stating that ve...

WordPress Plugin ReDi Restaurant Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin ReDi Restaurant Reservatio...

PT-2024-24032 · Unknown · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation versions through 24.0128 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For...

CVE-2023-6257

CVE-2023-6257 affects the WordPress plugin Inline Related Posts (before v3.6.0). The root cause is missing authorization in an AJAX action that serves post content to authenticated users, enabling subscribers to read content from password-protected posts. Reported base CVSS v3.1 score is 4.3 (Med...

DEBIAN-CVE-2021-47214

In the Linux kernel, the following vulnerability has been resolved: hugetlb, userfaultfd: fix reservation restore on userfaultfd error Currently in the iscontinue case in hugetlbmcopyatomicpte, if we bail out using "goto outreleaseunlock;" in the cases where idx = size, or !hugeptenone, the code...