73 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987362)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987362 advisory. In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 coresight:...
CVE-2024-7622
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2024-7622
CVE-2024-7622 (Revision Manager TMC, WordPress) : The plugin versions up to and including 2.8.19 allow unauthorized arbitrary email sending due to a missing capability check in _a_ajaxQuickEmailTestCallback(). An authenticated attacker with subscriber-level access or higher can send emails with a...
CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...
WordPress Revision Manager TMC plugin <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Email Sending vulnerability discovered by Lucio Sá in WordPress Plugin Revision Manager TMC versions = 2.8.19...
CVE-2024-7622: Missing Authorization
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...
WordPress plugin Revision Manager TMC 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Revision Manager TMC Plugin <= 2.8.19 is vulnerable to Broken Access Control
Software Revision Manager TMC Type Plugin Vulnerable versions = 2.8.19 Fixed in 2.8.20 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-7622 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5f819b940710 Credits Lucio Sá Required...
SUSE CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
DEBIAN-CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
UBUNTU-CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346
The CVE-2021-47346 entry concerns a Linux kernel vulnerability in coresight’s tmc-etf path. A global-out-of-bounds read (KASAN) occurred in tmc_update_etf_buffer() due to reading barrier_pkt beyond its allocated size after barrier_pkt trailing null removal in a prior patch. The issue is triggered...
CVE-2021-47346 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346 coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2021-47346: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etf: Fix global-out-of-bounds in tmcupdateetfbuffer commit 6f755e85c332 "coresight: Add helper for inserting synchronization packets" removed trailing '\0' from barrierpkt array and updated the call sites like...
CVE-2024-22028: Undefined Security Weakness
Insufficient technical documentation issue exists in thermal camera TMC series all firmware versions. The user of the affected product is not aware of the internally saved data. By accessing the affected product physically, an attacker may retrieve the internal data...