10511 matches found
CVE-2024-46765
CVE-2024-46765 affects the Linux kernel ice driver XDP configuration, where ice_xdp() and PF reset race on shared resources (ice_vsi_close/ice_prepare_for_reset, ice_vsi_rebuild, ice_vsi_open). The fix adds a mutex (xdp_state_lock) to protect ice_vsi_rebuild() and ice_xdp(), and introduces ICE_VS...
kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
A flaw was found in the Linux kernel's bpf programs. Under certain conditions, when the kernel attempts to initiate a network connection using the kernelconnect function, it can return a value that causes the cxtcpsetupsocket function to loop. This issue can lead to continuous data writing to the...
PT-2024-34005
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A memory leak issue has been identified in the Linux kernel, specifically in the RDMA/bnxt re module. The issue occurs in the bnxt re setup chip ctx function when bnxt qplib map db bar fails,...
Setup/Deployment Privilege Escalation
The vulnerability of the Setup/Deployment component of the Windows operating system is related to the absence of quotation marks in the syntax of certain elements or search paths. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2024-5170 Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5170 Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Exploit for CVE-2024-32651
CVE-2024-32651 changedetection --port --ip --notification...
RHSA-2018:3249 Red Hat Security Advisory: setup security and bug fix update
Bulletin has no description...
RHSA-2019:1206 Red Hat Security Advisory: rhvm-setup-plugins security update
Bulletin has no description...
RHSA-2019:1205 Red Hat Security Advisory: rhvm-setup-plugins security update
Bulletin has no description...
CVE-2024-6617 NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles
The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
CVE-2024-6887 Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high privilege users such as editor and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallow...
UBUNTU-CVE-2024-45011
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
CVE-2024-45011 char: xillybus: Check USB endpoints when probing device
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
CVE-2024-45011 char: xillybus: Check USB endpoints when probing device
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
media: tc358743: register v4l2 async device only after successful setup
...
drm/amd/display: Fix division by zero in setup_dsc_config
...
CVE-2024-7716
The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-7716
The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...