CVE-2022-48642

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fix percpu memory leak at nftablesaddchain It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a "netfilter: nftables: map basechain priority to hardware priority" wh...

CVE-2022-48642

Summary: CVE-2022-48642 is a Linux kernel vulnerability in netfilter/nf_tables that causes a percpu memory leak in nf_tables_addchain(), linked to nf_chain_offload_priority() error handling. The leak was observed since a prior commit and has been fixed in the kernel by the referenced changes (e.g...

RHEL 8 : Red Hat OpenStack Platform (collectd-libpod-stats) (RHSA-2023:1276)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1276 advisory. Collectd plugin for gathering resource usage statistics from containers created with the libpod library. Security Fixes: net/http: An attacker can...

RHEL 8 : Red Hat OpenStack Platform 17.1.1 (collectd-libpod-stats) (RHSA-2023:5970)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5970 advisory. A highly-available key value store for shared configuration Shared library for infrawatch golang components Security Fixes: golang: net/http...

PT-2024-5124

Name of the Vulnerable Software and Affected Versions: Node.js versions 20 through 21 Description: A flaw in the experimental permission model of Node.js allows malicious actors to retrieve stats from files they do not have explicit read access to when the --allow-fs-read flag is used. This issue...

CVE-2024-30387

A Missing Synchronization vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on ACX5448 and ACX710 allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. If an interface flaps while the system gathers statistics on that interface, two processes...

CVE-2024-31250

Cross-Site Request Forgery CSRF vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3...

CVE-2024-31250 WordPress WP Server Health Stats plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3...

CVE-2024-31250

CVE-2024-31250 is a Cross-Site Request Forgery (CSRF) in the WordPress plugin WP Server Health Stats (Saumya Majumder). Affected versions are 1.7.3 and earlier (from n/a through 1.7.3). The CVE record provides CVSS v3.1 data: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N with a base score of 4.3 (Medium). ...

CVE-2024-31250: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3...

PT-2024-23893 · WordPress · Wp Server Health Stats

Name of the Vulnerable Software and Affected Versions: WP Server Health Stats versions 1.7.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application...

WordPress Plugin WP Server Health Stats 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery...

SUSE CVE-2024-26690

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: protect updates of 64-bit statistics counters As explained by a comment in , write side of struct u64statssync must ensure mutual exclusion, or one seqcount update could be lost on 32-bit platforms, thus blocking...

WordPress WP Server Health Stats plugin <= 1.7.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das in WordPress Plugin WP Server Health Stats versions = 1.7.3...

WordPress WP Server Health Stats Plugin <= 1.7.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Server Health Stats Type Plugin Vulnerable versions = 1.7.3 Fixed in 1.7.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31250 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7e40a67d6b47 Credits Dhabaleshwar...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmugettrstats module of the tmu.c file, which may result in out-of-bounds reads...

PT-2024-21764 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the tmu get tr stats function of tmu.c, which could lead to a possible out of bounds read. This might...

CVE-2024-26740

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit ca22da2fbd69 "actmirred: use the backlog for nested calls to mirred ingress" hangs our testing VMs every 10 or so runs, with the familiar...

CVE-2024-26740 net/sched: act_mirred: use the backlog for mirred ingress

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit ca22da2fbd69 "actmirred: use the backlog for nested calls to mirred ingress" hangs our testing VMs every 10 or so runs, with the familiar...

CVE-2024-26686

In the Linux kernel, the following vulnerability has been resolved: fs/proc: dotaskstat: use sig-statslock to gather the threads/children stats locktasksighand can trigger a hard lockup. If NRCPUS threads call dotaskstat at the same time and the process has NRTHREADS, it will spin with irqs...