Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-24 18:03Z
2024-07-12
2024-07-12 13:15Z
CRIT

CVE-2024-40983 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40983

In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xfrm: Force a dst refcount before entering the xfrm type handlers"): "Crypto requests might return asynchronous. In this case we leave the rcu protected region, so force a refcount on the skb's destination entry before we enter the xfrm type input/output handlers." On TIPC decryption path it has the same problem, and CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-12
2024-07-12 13:15Z
HIGH

CVE-2024-40941 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40941

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the notification. Remove the print of the buffer, we won't see it by default. If needed, we can see the content with tracing. This was reported by KFENCE. CVSSv3.1 8.1 (HIGH) · EPSS 1th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-07-12
2024-07-12 13:15Z
CRIT

CVE-2024-40937 — Linux Linux_kernel: This can result in a subsequent call to napi_get_frags returning a dangling pointer.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40937

In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent call to napi_get_frags returning a dangling pointer. Fix this by clearing napi->skb before the skb is freed. CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-12
2024-07-12 13:15Z
CRIT

CVE-2024-40923 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40923

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to allocate memory for rq->data_ring.base, the subsequent call to vmxnet3_rq_destroy_all_rxdataring does not reset rq->data_ring.desc_size for the data ring that failed, which presumably causes the hypervisor to reference it on packet reception. To fix this bug, rq->data_ring.desc_size needs to be set to 0 to tell the hy CVSSv3.1 9.8 (CRITICAL)

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-12
2024-07-12 13:15Z
HIGH

CVE-2024-40911 — Linux Linux_kernel: This fixes the following kernel NULL dereference: Unable to handle kernel NULL pointer dereference

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40911

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NULL dereference: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 E CVSSv3.1 8.8 (HIGH)

CWECWE 476TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-12
2024-07-12 13:15Z
HIGH

CVE-2024-40910 — Linux Linux_kernel: This imbalance leads to refcount errors, and ultimately to kernel crashes.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40910

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_release(), we call netdev_put() to decrease the refcount on the associated ax.25 device. However, the execution path for accepting an incoming connection never calls netdev_hold(). This imbalance leads to refcount errors, and ultimately to kernel crashes. A typical call trace for the above situation will start with one of t CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-12
2024-07-12 13:15Z
CRIT

CVE-2024-40907 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-40907

In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet to the TX path with rx page and corresponding dma address. After tx is done, ionic_tx_clean() frees that page. But RX ring buffer isn't reset to NULL. So, it uses a freed page, which causes kernel panic. BUG: unable to handle page fault for address: ffff8881576c110c PGD 773801067 P4D 773801067 PUD 87f086067 PMD 87efca0 CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-07-12
2024-07-12 11:15Z
CRIT

CVE-2024-6328 — Inspireui Mstore_api: The MStore API – Create Native Android & iOS Apps On The Cloud plugin

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6328

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of the 'firebase_sms_login' and 'firebase_sms_login_v2' functions. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email address or phone numbe CVSSv3.1 9.8 (CRITICAL)

CWECWE 862CWECWE 288VNDInspireuiVNDMstoreTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-12
2024-07-12 09:15Z
HIGH

CVE-2024-6353 — Standalonetech Terawallet: The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6353

The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'search[value]' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive informa CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDStandalonetechVNDWalletTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-11
2024-07-11 07:15Z
HIGH

CVE-2024-6666 — Wedevs Wp_erp: The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6666

The WP ERP plugin for WordPress is vulnerable to SQL Injection via the ‘vendor_id’ and 'status' parameter in all versions up to, and including, 1.13.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Accounting Manager access (erp_ac_view_sales_summary capability) and above, to append additional SQL queries into already existing queries that can b CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDWedevsVNDErpTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-11
2024-07-11 07:15Z
CRIT

CVE-2024-6624 — Parorrey Json_api_user: The JSON API User plugin for WordPress is vulnerable to privilege escalation in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6624

The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed. CVSSv3.1 9.8 (CRITICAL)

CWECWE 269VNDParorreyTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-11
2024-07-11 04:15Z
CRIT

CVE-2024-6397 — Instawp Instawp_connect: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6397

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username, and to perform a variety of other administrative tasks. NOTE: This vulnerability was partially fixed i CVSSv3.1 9.8 (CRITICAL)

CWECWE 288CWECWE 287VNDInstawpTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-11
2024-07-11 00:00Z
CRIT

Introducing a New Vulnerability Class: False File Immutability

Elastic Security Labs·elastic.co

Elastic Security Labs introduces False File Immutability (FFI), a previously-unnamed Windows kernel vulnerability class where filesystem sharing assumptions fail when files are accessed over network redirectors (SMB, Samba). An attacker can modify PE files server-side during kernel operations like security catalog parsing or DLL loading in Protected Process Light (PPL), bypassing code integrity checks and achieving arbitrary kernel code execution. The vulnerability affects Windows 11 and was partially mitigated by Microsoft in February 2024 via dynamic page hash enforcement for network-loaded executables.

SRFOsTACTA0004TACTA0005OSWindowsVNDMicrosoftTYPResearchTYPVulnerabilitySTGDefense Evasion
92
Edit Score
2024-07-10
2024-07-10 05:15Z
HIGH

CVE-2024-6411 — Metagauss Profilegrid: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6411

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.8.9. This is due to a lack of validation on user-supplied data in the 'pm_upload_image' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their user capabilities to Administrator. CVSSv3.1 8.8 (HIGH)

CWECWE 269VNDMetagaussVNDProfilegridTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-10
2024-07-10 02:15Z
HIGH

CVE-2024-5792 — Houzez: The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5792

The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the notes ‘belong_to’ parameter in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Custom-level (seller) access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive in CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDHouzezTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-10
2024-07-10 02:15Z
HIGH

CVE-2023-7062 — Advanced: The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-7062

The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the server, which can contain sensitive information. CVSSv3.1 8.8 (HIGH)

CWECWE 538VNDAdvancedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-10
2024-07-10 02:15Z
HIGH

CVE-2023-7061 — Advancedfilemanager File_manager_advanced_shortcode: The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-7061

The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers with contributor access or above to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDAdvancedfilemanagerVNDAdvancedTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-09
2024-07-09 18:15Z
CRIT

CVE-2023-48194 — Tenda Ac8_firmware: Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-48194

Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0. After executing set_client_qos, control over the gp register can be obtained. CVSSv3.1 9.8 (CRITICAL) · EPSS 52th percentile

CWECWE 787VNDTendaVNDVulnerabilityTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-09
2024-07-09 17:15Z
CRIT

CVE-2024-39171 — Phpvibe Phpvibe: Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-39171

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code execution via writing specific statements to .htaccess and code to a file with a .png suffix. CVSSv3.1 9.8 (CRITICAL) · EPSS 66th percentile

CWECWE 22CWECWE 35VNDPhpvibeTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-07-09
2024-07-09 12:15Z
CRIT

CVE-2024-3596 — Freeradius Freeradius: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3596

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. CVSSv3.1 9.0 (CRITICAL) · EPSS 95th percentile

CWECWE 354CWECWE 924VNDBroadcomVNDSonicwallVNDFreeradiusTYPVulnerability
9.0
CVSS v3.1
100
Edit Score
2024-07-09
2024-07-09 11:15Z
CRIT

CVE-2024-37418 — Church_admin_project Church_admin: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6. CVSSv3.1 9.9 (CRITICAL) · EPSS 52th percentile

CWECWE 434VNDChurch Admin ProjectTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-07-09
2024-07-09 09:15Z
HIGH

CVE-2024-6069 — Registration: The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6069

The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pieregister_install_addon function in all versions up to, and including, 3.8.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins. As a result att CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDRegistrationTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-09
2024-07-09 09:15Z
HIGH

CVE-2024-5456 — Panda: The Panda Video plugin for WordPress is vulnerable to Local File Inclusion in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5456

The Panda Video plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.0 via the 'selected_button' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and oth CVSSv3.1 8.8 (HIGH)

CWECWE 22VNDPandaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-07-09
2024-07-09 09:15Z
CRIT

CVE-2024-3604 — Hyumika Openstreetmap: The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3604

The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'osm_map_v3' shortcode in all versions up to, and including, 6.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used CVSSv3.1 9.9 (CRITICAL)

CWECWE 89VNDHyumikaVNDOsmTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-07-09
2024-07-09 08:15Z
HIGH

CVE-2024-6321 — ScrollTo: The ScrollTo Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6321

The ScrollTo Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.1.1. This is due to missing nonce validation and missing file type validation in the 'options_page' function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into CVSSv3.1 8.8 (HIGH)

CWECWE 352VNDScrolltoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score