CVE-2023-0175

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0175

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0175 Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0175 Smart Logo Showcase Lite <= 1.1.9 - Contributor+ Stored XSS

The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2023-0175

CVE-2023-0175 affects the WordPress plugin Smart Logo Showcase Lite (≤ 1.1.9). The issue is failure to validate and escape certain shortcode attributes, allowing stored XSS when a page/post renders the shortcode. Affected actors include users with the contributor role and above; exploitation woul...

WordPress Smart Logo Showcase Lite Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Smart Logo Showcase Lite Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0175 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 946d9d91d290 Credits Lana Codes...

GLSA-202210-05 : virglrenderer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-05 virglrenderer: Multiple vulnerabilities - An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer virglrenderer. This flaw allows a malicious guest to create a specially crafted virgil resource and th...

CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3

CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3. A patched version of the package is available...

CVE-2022-0175

creationtimestamp| type| source ---|---|--- 2022-08-26 22:30:39+00:00| seen| https://t.me/cibsecurity/48918 2023-11-15 16:53:04+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5978...

CVE-2022-0175

A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...

AZL-10772 CVE-2022-0175 affecting package virglrenderer for versions less than 0.9.1-3

A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...

CVE-2022-0175

CVE-2022-0175 affects virglrenderer (VirGL virtual OpenGL renderer). A flaw in how memory is initialized for host-backed resources allows a malicious guest to mmap the guest kernel and read uninitialized host memory, potentially leaking information. Impact is information disclosure; attack vector...

CVE-2022-0175

A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:0721-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0721-1 advisory. - Update Intel Wireless firmware for 9xxx CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166,...

Ubuntu 20.04 LTS : virglrenderer vulnerabilities (USN-5309-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5309-1 advisory. It was discovered that virglrenderer incorrectly handled memory. An attacker inside a guest could use this issue to cause virglrenderer to crash, resulti...

Updated nonfree firmware packages fix security vulnerabilities

This update provides new and updated nonfree firmwares and fixes at least the following security issues: Improper input validation in firmware for IntelR PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access CVE-2021-0066 / SA-00539...

CVE-2021-0175

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0175

CVE-2021-0175 concerns improper validation of specified index/position/offset in input in Intel PROSet/Wireless Wi‑Fi firmware (and related Killer Wi‑Fi) across Windows 10/11 and multiple OSes, potentially enabling DoS via adjacent access by unauthenticated users. Connected documents corroborate ...

CVE-2021-0175

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2021-0175

Improper Validation of Specified Index, Position, or Offset in Input in firmware for some IntelR PROSet/Wireless Wi-Fi in multiple operating systems and some KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service via adjacent access...