3943 matches found
PT-2023-14038
Name of the Vulnerable Software and Affected Versions IntelR Connect M Android application versions prior to 1.82 Description The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations...
Intel® Connect M Android App Advisory
Summary: Potential security vulnerabilities in the Intel® Connect M Android application may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41801 Description: Uncontrolled...
PT-2025-8203
Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.0.x Description A use after free issue in the Linux kernel has been resolved. The problem occurred in the m can tx handler function, where can put echo skb would clone and then free an skb. To fix this, the can put echo...
Mitigation of M-04: Mitigation error
MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of M-04: Mitigation error Link to Issue: code-423n4/2023-03-asymmetry-findings932 Comments Even though the original issue is mitigated, as the exchange through Uniswap V3 has been completely removed in favor of using...
Mitigation Confirmed for Mitigation of M-10: Issue mitigated
Mitigated issue M-10: Stuck ether when use function stake with empty derivativesderivativeCount = 0 The issue was that stake will accept payment but not issue safETH when derivativeCount == 0 or when all weightsi == 0. Mitigation review The proposed mitigation simply adds a requirederivativeCount...
Mitigation of M-01: Issue NOT fully mitigated
Mitigated issue M-01: Division before multiplication truncate minOut and incurs heavy precision loss and result in insufficient slippage protection The issue was a loss of precision of three different kinds. 1 a/bc = ac/b in the calculation of mintAmount in SafEth.stake. Mitigation review The...
m-tron.at Cross Site Scripting vulnerability OBB-3293269
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Shanling MTouch OS 路径遍历漏洞
Shanling MTouch OS is a music player from Shanling, China. A security vulnerability exists in Shanling M5S Portable Music Player in Shanling MTouch OS v4.3 and Shanling M2X Portable Music Player in Shanling MTouch OS v3.3. An attacker can exploit the vulnerability to arbitrarily read, delete, or...
CVE-2023-23892
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...
CVE-2023-23892
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...
CVE-2023-23892
CVE-2023-23892 affects the WordPress plugin “M Chart” by Jamie Poitra. Versions 1.9.4, specifically 1.10, to mitigate. Reported impact is confined to XSS with a Moderate CVSS baseline in public sources, and there is no explicit public exploitation detail in the provided documents. Recommend appl...
CVE-2023-23892 WordPress M Chart Plugin <= 1.9.4 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...
PT-2023-19286 · Unknown · Jamie Poitra M Chart Plugin
Name of the Vulnerable Software and Affected Versions: Jamie Poitra M Chart plugin versions 1.9.4 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher authentication levels. There...
CVE-2023-23892: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Jamie Poitra M Chart plugin = 1.9.4 versions...
WordPress Plugin M Chart 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
M-Files Resource Management Error Vulnerability
M-Files is an innovative metadata-driven document management platform from M-Files, Inc. A resource management error vulnerability exists in versions prior to M-Files 23.4.12528.1 that stems from uncontrolled memory consumption of scheduled jobs, which can be exploited by an attacker to cause a...
CVE-2023-2112
Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...
CVE-2023-2112
Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0...