Skip to content
OpenAdvisories

Archive

31 August 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2024-44946 Public exploit

    kcm: Serialise kcm_sendmsg() for the same socket.

    In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Thread A resume…

  • Medium 5.3
    CVE-2022-4539 Public exploit

    Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

    The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restr…