SUSE CVE-2024-56532

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...

UBUNTU-CVE-2024-56532

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...

UBUNTU-CVE-2024-56533

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...

MAL-2024-12212 Malicious code in backwwii (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cf5e7427061483e779c53f125b5792b2e650261bcdca0a9f4d90e9ca883c04d0 When importing the module, the obfuscated code downloads and runs a remote executable --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

PT-2024-28177 · Unknown · Meks Video Importer

Name of the Vulnerable Software and Affected Versions: Meks Video Importer versions 1.0.12 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For Meks Video...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an uninitialized 0 in the result field of a command queue entry CQE when it is not in use, which could lead to...

UBUNTU-CVE-2024-39308

RailsAdmin is a Rails engine that provides an interface for managing data. RailsAdmin list view has the XSS vulnerability, caused by improperly-escaped HTML title attribute. Upgrade to 3.1.3 or 2.2.2 to be released...

PT-2024-13506 · WordPress · Wpmandrill

Name of the Vulnerable Software and Affected Versions: wpMandrill versions 1.33 and earlier Description: A Missing Authorization issue has been identified. This issue affects the wpMandrill plugin. Recommendations: For wpMandrill versions 1.33 and earlier, update to a version that includes a fix...

PT-2024-25357 · Unknown · Wpomnia Kb Support

Name of the Vulnerable Software and Affected Versions: WPOmnia KB Support versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPOmnia KB Support. Recommendations: For versions 1.6.0 and earlier, update to a version that includes the fix for thi...

Mozilla: Permission prompt input delay could expire when not in focus

The Mozilla Foundation Security Advisory describes this flaw as: The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites...

PT-2024-20574 · WordPress · Wp Dummy Content Generator

Name of the Vulnerable Software and Affected Versions: WP Dummy Content Generator versions 3.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in the WP Dummy Content Generator plugin for WordPress. This vulnerability allows for a security bypass...

PT-2024-14184 · Thrive Themes · Thrive Automator

Name of the Vulnerable Software and Affected Versions: Thrive Automator versions 1.17 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Thrive Automator, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: For Thrive...

CVE-2023-27461

Cross-Site Request Forgery CSRF vulnerability in Yoohoo Plugins When Last Login plugin = 1.2.1 versions...

WordPress Plugin When Last Login Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-28751 · Pigcms · Pigcms

Name of the Vulnerable Software and Affected Versions: pigcms versions up to 7.0 Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: For versions up to 7.0, update to a version that contains a fix for this issue, as using arbitrary file upload can lead to...

UBUNTU-CVE-2023-39352

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

GHSA-JM77-QPHF-C4W8 pyca/cryptography's wheels include vulnerable OpenSSL

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8-41.0.2 are vulnerable to several security issues. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20230731.txt,...

Mageia: Security Advisory (MGASA-2023-0147)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-3059 · Juniper Networks · Qfx10000 Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

when-release.ru Cross Site Scripting vulnerability OBB-3244046

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...