|
305781
|
7.1 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
NFC: nci: Bounds check struct nfc_target arrays
While running under CONFIG_FORTIFY_SOURCE=y, syzkaller reported:
memcpy: detec…
|
CWE-129
Improper Validation of Array Index
|
CVE-2022-48967
|
2024-10-26 06:27 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305782
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: Fix potential memory leak in otx2_init_tc()
In otx2_init_tc(), if rhashtable_init() failed, it does not free
tc->tc…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2022-48968
|
2024-10-26 06:26 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305783
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
xen-netfront: Fix NULL sring after live migration
A NAPI is setup for each network sring to poll data to kernel
The sring with so…
|
CWE-476
NULL Pointer Dereference
|
CVE-2022-48969
|
2024-10-26 06:22 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305784
|
5.3 |
MEDIUM
Network
|
servmask
|
all-in-one_wp_migration
|
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.86 through publicly exposed log files. This makes i…
|
NVD-CWE-noinfo
|
CVE-2024-8852
|
2024-10-26 06:20 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305785
|
8.8 |
HIGH
Network
|
roveridx
|
rover_idx
|
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'rover_idx_r…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2024-10002
|
2024-10-26 06:20 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305786
|
7.3 |
HIGH
Network
|
te-st
|
teplobot
|
The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'service_process' function in all versions up to, …
|
NVD-CWE-noinfo
|
CVE-2024-9627
|
2024-10-26 06:19 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305787
|
6.3 |
MEDIUM
Network
|
roveridx
|
rover_idx
|
The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 3…
|
CWE-862
Missing Authorization
|
CVE-2024-10003
|
2024-10-26 06:19 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305788
|
4.3 |
MEDIUM
Network
|
blazethemes
|
news_kit_elementor_addons
|
The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/…
|
NVD-CWE-noinfo
|
CVE-2024-9541
|
2024-10-26 06:16 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305789
|
5.4 |
MEDIUM
Network
|
aftabhusain
|
category_and_taxonomy_meta_fields
|
The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on…
|
CWE-352
Origin Validation Error
|
CVE-2024-9588
|
2024-10-26 06:15 |
2024-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
305790
|
3.1 |
LOW
Network
|
archerirm
|
archer
|
Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit t…
|
CWE-863
Incorrect Authorization
|
CVE-2024-49208
|
2024-10-26 05:18 |
2024-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
