Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-25 09:45Z
2024-03-05
2024-03-05 02:15Z
HIGH

CVE-2024-0825 — Davekiss Vimeography: The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-0825

The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplicate_gallery function. This makes it possible for authenticated attackers attackers, with contributor access or higher, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via CVSSv3.1 8.8 (HIGH) · EPSS 78th percentile

CWECWE 502VNDDavekissVNDVimeographyTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-04
2024-03-04 19:15Z
CRIT

CVE-2021-47107 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47107

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix READDIR buffer overflow If a client sends a READDIR count argument that is too small (say, zero), then the buffer size calculation in the new init_dirlist helper functions results in an underflow, allowing the XDR stream functions to write beyond the actual buffer. This calculation has always been suspect. NFSD has never sanity- checked the READDIR count argument, but the old entry encoders manag CVSSv3.1 9.8 (CRITICAL) · EPSS 31th percentile

CWECWE 120TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-04
2024-03-04 18:15Z
CRIT

CVE-2021-47103 — Linux Linux_kernel: [1] BUG: KASAN: use-after-free in dst_check include/net/dst.h:470 [inline] BUG: KASAN: use-after-free in tcp_v4_early_demux+0x95b/0x960 net/ipv4/tcp_ipv4.c:1792

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47103

In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around early demux, one being included in this changelog [1] sk->sk_rx_dst is using RCU protection without clearly documenting it. And following sequences in tcp_v4_do_rcv()/tcp_v6_do_rcv() are not following standard RCU rules. [a] dst_release(dst); [b] sk->sk_rx_dst = NULL; They look wrong because a delete operation of CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-03-02
2024-03-02 22:15Z
HIGH

CVE-2024-26621 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-26621

In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: don't force huge page alignment on 32 bit commit efa7df3e3bb5 ("mm: align larger anonymous mappings on THP boundaries") caused two issues [1] [2] reported on 32 bit system or compat userspace. It doesn't make too much sense to force huge page alignment on 32 bit system due to the constrained virtual address space. [1] https://lore.kernel.org/linux-mm/d0a136a0-4a31-46bc-adf4-2db109a61672@k CVSSv3.1 8.2 (HIGH) · EPSS 20th percentile

TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2024-03-02
2024-03-02 22:15Z
HIGH

CVE-2023-52530 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52530

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, b CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-02
2024-03-02 22:15Z
HIGH

CVE-2023-52522 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: fix possible store

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52522

In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list. Readers use rcu_deference(*np), we need to use either rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store tearing. I use rcu_assign_pointer() to have lockdep support, t CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-02
2024-03-02 22:15Z
CRIT

CVE-2023-52515 — Linux Linux_kernel: Otherwise all the above actions would trigger a use-after-free.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52515

In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Do not call scsi_done() from srp_abort() After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call CVSSv3.1 9.8 (CRITICAL) · EPSS 14th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-03-02
2024-03-02 22:15Z
HIGH

CVE-2023-52502 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52502

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear. CVSSv3.1 8.8 (HIGH) · EPSS 7th percentile

CWECWE 416CWECWE 362TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-03-01
2024-03-01 07:15Z
HIGH

CVE-2024-1859 — Awplife Slider_responsive_slideshow: The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1859

The Slider Responsive Slideshow – Image slider, Gallery slideshow plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.8 via deserialization of untrusted input to the awl_slider_responsive_shortcode function. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile

CWECWE 502VNDAwplifeVNDSliderTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-29
2024-02-29 06:15Z
CRIT

CVE-2023-52480 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52480

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfr CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

CWECWE 362TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-29
2024-02-29 06:15Z
HIGH

CVE-2023-52479 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52479

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo. CVSSv3.1 8.8 (HIGH) · EPSS 14th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-29
2024-02-29 06:15Z
HIGH

CVE-2023-52478 — Linux Linux_kernel: Hitting the race leads to the following sequence: hidpp->battery.desc.properties = devm_kmemdup(dev, hidpp_battery_props, cnt, GFP_KERNEL)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-52478

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect hidpp_connect_event() has *four* time-of-check vs time-of-use (TOCTOU) races when it races with itself. hidpp_connect_event() primarily runs from a workqueue but it also runs on probe() and if a "device-connected" packet is received by the hw when the thread running hidpp_connect_event() from probe() is waiting on the hw, then a second thread CVSSv3.1 8.8 (HIGH) · EPSS 7th percentile

CWECWE 367TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-29
2024-02-29 04:15Z
HIGH

CVE-2024-1468 — Theme-fusion Avada: The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1468

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_import_options() function in all versions up to, and including, 7.11.4. This makes it possible for authenticated attackers, with contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH) · EPSS 88th percentile

CWECWE 434VNDTheme FusionVNDAvadaTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2024-02-29
2024-02-29 01:44Z
CRIT

CVE-2024-23052 — 5kcrm Wukong_crm: An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202 allows a remote attacker to execute arbitrary code via the parseObject() function in the fastjson component. CVSSv3.1 9.8 (CRITICAL) · EPSS 91th percentile

CWECWE 502VND5kcrmVNDWukongopensourceTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2024-02-29
2024-02-29 01:43Z
HIGH

CVE-2024-1317 — Themeisle Rss_aggregator_by_feedzy: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1317

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘search_key’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor access and above, to append additional SQL queries into already CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile

CWECWE 89VNDThemeisleVNDRssTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-29
2024-02-29 01:43Z
HIGH

CVE-2024-1206 — Bootstrapped Wp_recipe_maker: The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1206

The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter in all versions up to, and including, 9.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile

CWECWE 89VNDBootstrappedVNDRecipeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-29
2024-02-29 01:43Z
MED

CVE-2024-0590 — Microsoft Clarity: The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-0590

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthenticated attackers to change the project id and add malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 6.1 (MEDIUM) · EPSS 96th percentile

CWECWE 352VNDMicrosoftTYPVulnerability
6.1
CVSS v3.1
88
Edit Score
2024-02-28
2024-02-28 22:15Z
HIGH

CVE-2024-22983 — Projectworlds Visitor_management_system: SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint. CVSSv3.1 8.1 (HIGH) · EPSS 55th percentile

CWECWE 89VNDProjectworldsTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-02-28
2024-02-28 09:15Z
CRIT

CVE-2024-1514 — Wp-ecommerce Wp_ecommerce: The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-1514

The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. CVSSv3.1 9.8 (CRITICAL) · EPSS 72th percentile

CWECWE 89VNDWordpressVNDWp EcommerceTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-28
2024-02-28 09:15Z
HIGH

CVE-2024-0786 — Tatvic Conversios.io: The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-0786

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ee_syncProductCategory function using the parameters conditionData, valueData, productArray, exclude and include in all versions up to, and including, 7.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for au CVSSv3.1 8.8 (HIGH) · EPSS 61th percentile

CWECWE 89VNDTatvicVNDConversiosTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-28
2024-02-28 09:15Z
HIGH

CVE-2021-47049 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47049

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Use after free in __vmbus_open() The "open_info" variable is added to the &vmbus_connection.chn_msg_list, but the error handling frees "open_info" without removing it from the list. This will result in a use after free. First remove it from the list, and then free it. CVSSv3.1 8.4 (HIGH) · EPSS 14th percentile

CWECWE 416TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2024-02-28
2024-02-28 09:15Z
CRIT

CVE-2021-47036 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: udp: skip L4 aggregation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47036

In the Linux kernel, the following vulnerability has been resolved: udp: skip L4 aggregation for UDP tunnel packets If NETIF_F_GRO_FRAGLIST or NETIF_F_GRO_UDP_FWD are enabled, and there are UDP tunnels available in the system, udp_gro_receive() could end-up doing L4 aggregation (either SKB_GSO_UDP_L4 or SKB_GSO_FRAGLIST) at the outer UDP tunnel level for packets effectively carrying and UDP tunnel header. That could cause inner protocol corruption. If e.g. the relevant pac CVSSv3.1 9.8 (CRITICAL) · EPSS 11th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-02-28
2024-02-28 09:15Z
HIGH

CVE-2021-47035 — Linux Linux_kernel: When using second level, we still give separate permissions that allows WriteOnly which seems

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47035

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When the first level page table is used for IOVA translation, it only supports Read-Only and Read-Write permissions. The Write-Only permission is not supported as the PRESENT bit (implying Read permission) should always set. When using second level, we still give separate permissions that allows WriteOnly which seems inconsistent and awkward. CVSSv3.1 8.8 (HIGH) · EPSS 16th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-28
2024-02-28 09:15Z
HIGH

CVE-2021-47017 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix a use

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47017

In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix a use after free in ath10k_htc_send_bundle In ath10k_htc_send_bundle, the bundle_skb could be freed by dev_kfree_skb_any(bundle_skb). But the bundle_skb is used later by bundle_skb->len. As skb_len = bundle_skb->len, my patch replaces bundle_skb->len to skb_len after the bundle_skb was freed. CVSSv3.1 8.8 (HIGH) · EPSS 15th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-02-28
2024-02-28 09:15Z
CRIT

CVE-2021-47013 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47013

In the Linux kernel, the following vulnerability has been resolved: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len). As i observed that emac_tx_fill_tpd() haven't modified the value of skb->le CVSSv3.1 9.8 (CRITICAL) · EPSS 18th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score