15727 matches found
SUSE CVE-2024-47711
In the Linux kernel, the following vulnerability has been resolved: afunix: Don't return OOB skb in manageoob. syzbot reported use-after-free in unixstreamrecvurg. 0 The scenario is 1. sendMSGOOB 2. recvMSGOOB - The consumed OOB remains in recv queue 3. sendMSGOOB 4. recv - manageoob returns the...
DEBIAN-CVE-2024-47719
In the Linux kernel, the following vulnerability has been resolved: iommufd: Protect against overflow of ALIGN during iova allocation Userspace can supply an iova and uptr such that the target iova alignment becomes really big and ALIGN overflows which corrupts the selected area range during...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the tail call test in the powerpc/bpf/32 subsystem, which could lead to kernel data...
CVE-2023-6243
The EventON PRO - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.8. This is due to missing or incorrect nonce validation on the admintestemail function. This makes it possible for unauthenticated...
CVE-2023-6243
The CVE-2023-6243 entry concerns EventON Pro (WordPress) up to version 4.6.8, with a Cross-Site Request Forgery (CSRF) flaw in the admin_test_email function caused by missing or improper nonce validation. This can allow unauthenticated attackers to trigger test emails to arbitrary addresses by tr...
WordPress plugin EventON PRO 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...
WordPress EventON PRO plugin <= 4.6.8 - Cross-Site Request Forgery via admin_test_email vulnerability
Cross-Site Request Forgery via admintestemail vulnerability discovered by Francesco Carlucci in WordPress Plugin EventON Pro versions = 4.6.8...
PT-2024-14910 · WordPress · Eventon Pro
Name of the Vulnerable Software and Affected Versions: The EventON PRO - WordPress Virtual Event Calendar Plugin plugin versions up to, and including, 4.6.8 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the admin test email functio...
Malicious code in test-package-sample (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10169 Malicious code in test-package-sample (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ts-calling-test-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0db756d26a3007b10201297415dfaa2cf6315b37f9ef0b88fa32feac6aaf42bd The OpenSSF Package Analysis project identified 'ts-calling-test-app' @ 1.999.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-9305 Malicious code in ts-calling-test-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0db756d26a3007b10201297415dfaa2cf6315b37f9ef0b88fa32feac6aaf42bd The OpenSSF Package Analysis project identified 'ts-calling-test-app' @ 1.999.0 npm as malicious. It is considered malicious because: - The...
Malicious code in test_lykos2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test-tech-talk (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9877 Malicious code in test-tech-talk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in princedevmt-test-2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9782 Malicious code in princedevmt-test-2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in princedevmt-test-1 (npm)
--- -= Per source details. Do not edit below this line.=-...