VulDB Recent Entries

A vulnerability was found in Linux Kernel up to 6.11.6. It has been rated as problematic. This issue affects the function tb_retimer_scan. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-50227. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.59/6.11.6. It has been declared as problematic. This vulnerability affects the function spi_get_csgpiod. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2024-50224. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.59/6.11.6. It has been classified as problematic. This affects the function task_numa_work. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-50223. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.170/6.1.115/6.6.59/6.11.6 and classified as problematic. Affected by this issue is the function unreserve_highatomic_pageblock of the component Network Packet Handler. The manipulation leads to allocation of resources. This vulnerability is handled as CVE-2024-50219. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.11.6 and classified as problematic. Affected by this vulnerability is the function ocfs2_truncate_inline. The manipulation of the argument value leads to insufficient verification of data authenticity. This vulnerability is known as CVE-2024-50218. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.11.6. Affected is the function __btrfs_free_extra_devids of the component btrfs. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-50217. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.59/6.11.6. This issue affects the function xfs_filestream_pick_ag. The manipulation leads to uninitialized pointer. The identification of this vulnerability is CVE-2024-50216. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.1.115/6.6.59/6.11.6. This vulnerability affects the function nvmet_setup_dhgroup of the component nvmet-auth. The manipulation leads to double free. This vulnerability was named CVE-2024-50215. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.11.6. This affects the function drm_display_mode_from_cea_vic. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2024-50214. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.11.6. It has been rated as problematic. Affected by this issue is the function drm_display_mode_from_cea_vic. The manipulation leads to memory leak. This vulnerability is handled as CVE-2024-50213. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.115/6.6.59/6.11.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component spectrum_ipip. The manipulation leads to improper update of reference count. This vulnerability is known as CVE-2024-50252. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.59/6.11.6. It has been classified as critical. Affected is the function cxl_region_decode_reset. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-50226. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.15.170/6.1.115/6.6.59/6.11.6 and classified as problematic. This issue affects the function nsim_nexthop_bucket_activity_write of the component netdevsim. The manipulation leads to Privilege Escalation. The identification of this vulnerability is CVE-2024-50259. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in I Thirteen Web Solution Responsive Filterable Portfolio Plugin up to 1.0.22 on WordPress. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2024-51785. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-11048. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to stack-based buffer overflow. This vulnerability is known as CVE-2024-11047. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. This vulnerability is traded as CVE-2024-11046. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in fatcatapps Landing Page Cat Plugin up to 1.7.6 on WordPress and classified as problematic. This issue affects the function add_query_arg. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-9226. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in ce21com CE21 Suite Plugin up to 2.2.0 on WordPress and classified as critical. This vulnerability affects the function ce21_authentication_phrase. The manipulation leads to authentication bypass using alternate channel. This vulnerability was named CVE-2024-10284. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in nouthemes Leopard Plugin up to 3.1.1 on WordPress. This affects the function import_settings. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-10589. It is possible to initiate the attack remotely. There is no exploit available.