GSD-2021-1002386 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

staging: rtl8192e: Fix use after free in rtl92epcidisconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by commit...

GSD-2021-1002369 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

staging: rtl8192e: Fix use after free in rtl92epcidisconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by commit...

GSD-2021-1002354 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()

staging: rtl8192e: Fix use after free in rtl92epcidisconnect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by commit...

QIWI: disclosing clients' secret keys https://stage-uapi.tochka.com:2000/

The reporter has found an open URL on a staging server leaking client IDs and client secrets used in oauth2...

UVI-2021-1002345 staging: rtl8723bs: remove possible deadlock when disconnect (v2)

staging: rtl8723bs: remove possible deadlock when disconnect v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002344 staging: rtl8723bs: remove a second possible deadlock

staging: rtl8723bs: remove a second possible deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002344 staging: rtl8723bs: remove a second possible deadlock

staging: rtl8723bs: remove a second possible deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002343 staging: rtl8723bs: remove a third possible deadlock

staging: rtl8723bs: remove a third possible deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

GSD-2021-1002343 staging: rtl8723bs: remove a third possible deadlock

staging: rtl8723bs: remove a third possible deadlock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002298 staging: rtl8723bs: remove possible deadlock when disconnect (v2)

staging: rtl8723bs: remove possible deadlock when disconnect v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

GSD-2021-1002298 staging: rtl8723bs: remove possible deadlock when disconnect (v2)

staging: rtl8723bs: remove possible deadlock when disconnect v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

CVE-2021-24877

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

Sql injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

CVE-2021-24877 MainWP Child < 4.1.8 - Admin+ SQL Injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

UVI-2021-1002209 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.2 by commit...

GSD-2021-1002209 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.2 by commit...

UVI-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

GSD-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

GSD-2021-1002072 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.79 by commit...

PT-2024-11491 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel, specifically in the r8188eu staging driver. The issue was fixed by freeing the ptmp variable before returning an error code -EINVAL...