PT-2024-16417

Name of the Vulnerable Software and Affected Versions Simple Shortcode for Google Maps plugin for WordPress versions up to, and including, 1.5.4 Description The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the pw map shortcode. This allows...

PT-2024-34004

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A potential memory leak in the bcm sysport xmit function has been resolved. The issue occurred when bcm sysport xmit returned NETDEV TX OK without freeing skb in case of dma map single failur...

PT-2024-34015

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the version that includes the fix for the secretmem vulnerability Description: A vulnerability in the Linux kernel has been resolved, related to the secretmem feature. The issue occurs when the memfd secret...

CVE-2024-10715

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

PT-2024-16485 · WordPress · Mappress Maps

Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions up to, and including, 2.94.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's Map block due to insufficient input sanitization and output escaping on user-supplied...

WordPress plugin MapPress Maps for WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-10715: Improper Neutralization of Input During Web Page Generation

The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map block in all versions up to, and including, 2.94.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-9867

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

CVE-2024-9867 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' markercontent parameter in all versions up to, and including, 5.10.2 due to insufficient input...

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2024-39899 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.10.2 Description: The issue is related to Stored Cross-Site Scripting via the marker content parameter in the 'Open Map Widget'. This is due to insufficie...

PT-2025-3622

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, specifically in the drm/amdkfd component, where the migration DMA map direction was not set correctly. This could lead to the DMA core...

CVE-2024-45882

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletemapprofile...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing PDRs in the driver to obtain a remote heap map...

PT-2024-34120

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the net: arc module, specifically with the dma map single and dma unmap single functions. The issue arises because...

PT-2024-31837 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: A command injection issue occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to 'set ap map config'. This allows for potential command injection attacks...

WS-2022-0085

Versions before 2.0.2 of the crate 'enum-map' did not properly check the length of an enum when using enummap! macro, trusting user-provided length. Fixed in version 2.0.2. When the LENGTH in the Enum trait does not match the array length in the EnumArray trait, this can result in the...

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Remote Code Execution (RCE)

Overview studio-42/elfinder is an open-source file manager for web, written in JavaScript using jQuery UI. Affected versions of this package are vulnerable to Remote Code Execution RCE due to the lack of restrictions on file types that can be uploaded, specifically the .php8 extension. An attacke...

Security update for xwayland

This update for xwayland fixes the following issues: CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in XkbSetCompatMap bsc1231565. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...