Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-24 20:35Z
2024-06-20
2024-06-20 08:15Z
HIGH

CVE-2024-38620 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-38620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCI_AMP support Since BT_HS has been remove HCI_AMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP and Primary controllers, as only HCI_PRIMARY is left, this also remove hdev->dev_type altogether. CVSSv3.1 8.8 (HIGH)

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-20
2024-06-20 07:15Z
CRIT

CVE-2024-4098 — Datenverwurstungszentrale Shariff_wrapper: The Shariff Wrapper plugin for WordPress is vulnerable to Local File Inclusion in versions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-4098

The Shariff Wrapper plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.6.13 via the shariff3uu_fetch_sharecounts function. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and inc CVSSv3.1 9.8 (CRITICAL)

CWECWE 552CWECWE 22VNDDatenverwurstungszentraleVNDShariffTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-20
2024-06-20 04:15Z
HIGH

CVE-2024-5605 — Davidlingren Media_library_assistant: The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5605

The Media Library Assistant plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter within the mla_tag_cloud Shortcode in all versions up to, and including, 3.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that c CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDDavidlingrenVNDMediaTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-20
2024-06-20 02:15Z
CRIT

CVE-2024-5432 — Webinane Lifeline_donation: The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5432

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. CVSSv3.1 9.8 (CRITICAL)

CWECWE 288CWECWE 287VNDWebinaneVNDLifelineTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-20
2024-06-20 02:15Z
CRIT

CVE-2024-3605 — Thimpress Wp_hotel_booking: The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3605

The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms REST API endpoint in all versions up to, and including, 2.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive inf CVSSv3.1 10.0 (CRITICAL)

CWECWE 89VNDThimpressVNDHotelTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2024-06-20
2024-06-20 02:15Z
HIGH

CVE-2024-3562 — Custom_field_suite_project Custom_field_suite: The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3562

The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.6.7 via the Loop custom field. This is due to insufficient sanitization of input prior to being used in a call to the eval() function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code on the server. CVSSv3.1 8.8 (HIGH)

CWECWE 94CWECWE 95VNDCustom Field Suite ProjectVNDCustomTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-20
2024-06-20 02:15Z
HIGH

CVE-2024-3561 — Custom_field_suite_project Custom_field_suite: The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3561

The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and including, 2.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information CVSSv3.1 8.8 (HIGH)

CWECWE 89VNDCustom Field Suite ProjectVNDCustomTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2024-06-19
2024-06-19 15:15Z
HIGH

CVE-2021-47611 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47611

In the Linux kernel, the following vulnerability has been resolved: mac80211: validate extended element ID is present Before attempting to parse an extended element, verify that the extended element ID is present. CVSSv3.1 8.1 (HIGH) · EPSS 13th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-06-19
2024-06-19 15:15Z
CRIT

CVE-2021-47587 — Linux Linux_kernel: This was particularly noticeable when using multiple flows/transmit queues and it showed up in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-47587

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Add global locking for descriptor lifecycle The descriptor list is a shared resource across all of the transmit queues, and the locking mechanism used today only protects concurrency across a given transmit queue between the transmit and reclaiming. This creates an opportunity for the SYSTEMPORT hardware to work on corrupted descriptors if we have multiple producers at once which is the cas CVSSv3.1 9.8 (CRITICAL) · EPSS 8th percentile

CWECWE 667TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-19
2024-06-19 14:15Z
CRIT

CVE-2024-38612 — Linux Linux_kernel: This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control lwtunnel support")

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-38612

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregister_family() isn't called. This issue exist since commit 46738b1317e1 ("ipv6: sr: add option to control lwtunnel support"), and commit 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and null-ptr-deref") replaced un CVSSv3.1 9.8 (CRITICAL) · EPSS 37th percentile

CWECWE 416CWECWE 476TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-19
2024-06-19 14:15Z
CRIT

CVE-2024-38570 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock con CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-19
2024-06-19 14:15Z
CRIT

CVE-2024-38558 — Linux Linux_kernel: The issue results in all but the last 4 bytes of the destination address

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-38558

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, re CVSSv3.1 10.0 (CRITICAL) · EPSS 4th percentile

CWECWE 665TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2024-06-19
2024-06-19 14:15Z
CRIT

CVE-2024-38544 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-38544

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the completer task inline or schedule it. Finally the skb is dereferenced to bump a 'hw' performance counter. This is wrong because if the completer task is already running in a separate thread it may have already processed the sk CVSSv3.1 9.8 (CRITICAL)

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-19
2024-06-19 06:15Z
HIGH

CVE-2024-6132 — Pexels: The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6132

The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexels_fsp_images_options_validate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDPexelsTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-19
2024-06-19 06:15Z
CRIT

CVE-2024-5853 — Sirv Sirv: The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5853

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and including, 7.2.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSirvVNDImageTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2024-06-19
2024-06-19 06:15Z
HIGH

CVE-2024-5343 — Photo: The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5343

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.19. This is due to missing or incorrect nonce validation on the 'rbs_ajax_create_article' and 'rbs_ajax_reset_views' functions. This makes it possible for unauthenticated attackers to create new posts and reset gallery view counts via a forged request granted they can trick a Contributor+ level user into performing a CVSSv3.1 8.8 (HIGH)

CWECWE 352TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-19
2024-06-19 05:15Z
CRIT

CVE-2024-3229 — Salonbookingsystem Salon_booking_system: The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-3229

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_ImportAssistants function along with missing authorization checks in all versions up to, and including, 10.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDSalonbookingsystemVNDSalonTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-19
2024-06-19 04:15Z
HIGH

CVE-2024-5724 — Webhuntinfotech Photo_video_gallery_master: The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5724

The Photo Video Gallery Master plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.3 via deserialization of untrusted input 'PVGM_all_photos_details' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDWebhuntinfotechTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-19
2024-06-19 04:15Z
CRIT

CVE-2024-5021 — WordPress: The WordPress Picture / Portfolio / Media Gallery plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-5021

The WordPress Picture / Portfolio / Media Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.1 via the 'file_get_contents' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. CVSSv3.1 9.3 (CRITICAL)

CWECWE 918VNDWordpressTYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2024-06-19
2024-06-19 04:15Z
HIGH

CVE-2024-2381 — Ali2woo Aliexpress_dropshipping_with_alinext: The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-2381

The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_save_image function in all versions up to, and including, 3.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDAli2wooVNDAliexpressTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-19
2024-06-19 02:15Z
HIGH

CVE-2024-6125 — Login: The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-6125

The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing a 6-digit numeric reset code. CVSSv3.1 8.1 (HIGH)

CWECWE 640VNDLoginTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2024-06-18
2024-06-18 20:15Z
HIGH

CVE-2024-37821 — Dolibarr Dolibarr_erp\/crm: An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-37821

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file. CVSSv3.1 8.8 (HIGH) · EPSS 51th percentile

CWECWE 94VNDDolibarrTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2024-06-17
2024-06-17 21:15Z
CRIT

CVE-2023-37058 — Unionman Jlink_ax1800_firmware: Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-37058

Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command. CVSSv3.1 9.8 (CRITICAL) · EPSS 47th percentile

CWECWE 269VNDUnionmanTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-17
2024-06-17 21:15Z
CRIT

CVE-2023-37057 — JLINK: Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2023-37057

An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentication mechanism. CVSSv3.1 9.8 (CRITICAL) · EPSS 56th percentile

CWECWE 288VNDJlinkTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2024-06-17
2024-06-17 19:15Z
CRIT

CVE-2024-36543 — Incorrect: access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-36543

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector (bypassing Kafka ACL if it exists), and potentially steal Kafka SASL credentials, by querying the MirrorMaker Kafka REST API. CVSSv3.1 9.8 (CRITICAL) · EPSS 41th percentile

CWECWE 400TYPVulnerability
9.8
CVSS v3.1
99
Edit Score