SUSE CVE-2024-26843

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2023-4232

CVE-2023-4232 affects ofono on Linux. A stack overflow in the decode_status_report() path during SMS decoding (missing bound check for memcpy length) can be triggered remotely via SMS, modem, or base station access. Impact is high (C, I, A all high) with network access and no user interaction req...

CVE-2024-26843

A flaw was found in the Linux kernel. Due to an integer overflow, certain EFI-related memory reservations might receive a size other than expected, leading to a denial of service...

CVE-2024-26905

CVE-2024-26905 is rejected by the CNA and not a valid vulnerability entry.

DEBIAN-CVE-2024-26843

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

UBUNTU-CVE-2024-26843

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2024-26843

The Linux kernel contains a vulnerability in the efi runtime component where a potential overflow of the soft-reserved region size can occur. This happens when a soft-reserved region contains $\ge$ 4GB worth of pages, causing the md_size value to be narrowed. The issue has been resolved in recent...

CVE-2024-26843

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2024-26843 efi: runtime: Fix potential overflow of soft-reserved region size

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an overflow problem in the size of the soft-reserved region...

CVE-2024-26843: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed if we have = 4GB worth of pages in a soft-reserved region...

CVE-2024-25911

CVE-2024-25911: WordPress MoveTo plugin

CVE-2023-40000

The LiteSpeed Cache plugin for WordPress (versions prior to 5.7.0.1 ) contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper input sanitization in the update_cdn_status function. Unauthenticated attackers can send a POST request to the /wp-json/litespeed/v1/cdn_status endpoint...

CVE-2023-52144

CVE-2023-52144 is a Path Traversal in the RexTheme Product Feed Manager (WordPress plugin). Connected Red Hat/ENISA/NVD entries confirm this as an Improper Limitation of a Pathname to a Restricted Directory affecting RexTheme Product Feed Manager up to version 7.3.15. The Red Hat entry notes the ...

CVE-2024-2858

The Simple Buttons Creator WordPress plugin, in versions 1.04 and earlier , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks in certain locations. This flaw could allow an attacker to trick a logged-in user into performing unwanted actions, specifically inclu...

CVE-2024-2739

The Advanced Search WordPress plugin (versions

CVE-2024-1849

The WP Customer Reviews WordPress plugin is vulnerable to Unvalidated Redirects and Forwards in versions prior to 3.7.1 . The root cause is a failure to validate a parameter, which allows users with Contributor privileges or higher to redirect pages to a malicious URL. This flaw can be leveraged ...

CVE-2024-1310

The WooCommerce WordPress plugin in versions before 8.6 is vulnerable to a Broken Access Control flaw. This vulnerability allows users with at least the contributor role to leak products they should not have access to, specifically private, draft, and trashed products . The issue was resolved in ...