12780 matches found
WordPress plugin Quick Featured Images has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-8927
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the allocation of insufficient memory in the GUID structure of the fs/ntfs3 module in the Linux kernel. This could allow a remote attacker to impact the...
LG WebOS Service Arbitrary Command Execution
The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...
PT-2024-27104
Name of the Vulnerable Software and Affected Versions Quick Featured Images plugin for WordPress versions up to, and including, 13.7.0 Description The issue allows authenticated attackers with contributor-level access and above to modify data without authorization. This is due to a missing...
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Insecure Direct Object Reference Vulnerability
Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link suffers from an unauthenticated device configuration and client-side hidden functionality disclosure vulnerability. Elber Reble610 M/ODU XPIC IP-ASI-SDH Microwave Link Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it...
netfilter DoS
The vulnerability of the netfilter component in the Linux operating system’s kernel is related to a break in the memcpy function when connlimit is used in elements of the set. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
TOTOLINK EX200 setWiFiExtenderConfig method key parameter cross-site scripting vulnerability
TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from a cross-site scripting vulnerability, which stems from the la...
PT-2024-40702 · Oracle · Java
Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: A security exception occurs in the JavaLanguageParser statement, specifically in the com.puppycrawl.tools.checkstyle.grammar.java package. The issue involves the weakCompareAndSetInt and...
DEBIAN-CVE-2023-50010
FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ffgradfunblurlinemovdqasse2, as demonstrated by a call to the setencoderid function in /fftools/ffmpegenc.c component...
SUSE CVE-2024-26830
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down VF tries to delete all MACs then the MAC is removed from MAC filters and primary V...
FFmpeg security vulnerabilities
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version v.n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code via the setencoderid function in the...
CVE-2024-32325
TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the ssid parameter in the setWiFiExtenderConfig function...
CVE-2024-32326
TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...
TOTOLINK EX200 security vulnerabilities
TOTOLINK EX200 is a 2.4GHz wireless N range extender launched by China Gion Electronics, which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. A cross-site scripting vulnerability exists in the TOTOLINK EX200, which stems from the...
DEBIAN-CVE-2024-2961
The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable...
CVE-2024-26830
A flaw was found in Intel network adapters in the Linux kernel, where untrusted virtualized network interfaces can remove MAC addresses set by the system. This flaw allows an attacker with sufficient privileges to cause a denial of service...
AZL-59445 CVE-2024-26830 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down VF tries to delete all MACs then the MAC is removed from MAC filters and primary V...
DEBIAN-CVE-2024-26830
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down VF tries to delete all MACs then the MAC is removed from MAC filters and primary V...
CVE-2024-26830
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down VF tries to delete all MACs then the MAC is removed from MAC filters and primary V...
UBUNTU-CVE-2024-26830
In the Linux kernel, the following vulnerability has been resolved: i40e: Do not allow untrusted VF to remove administratively set MAC Currently when PF administratively sets VF's MAC address and the VF is put down VF tries to delete all MACs then the MAC is removed from MAC filters and primary V...