CVE-2024-0977

The CVE-2024-0977 entry concerns Timeline Widget For Elementor (WordPress) up to version 1.5.3, which is vulnerable to stored XSS via image URLs due to insufficient input sanitization and output escaping. Exploitation requires authenticated access (Contributor+). The issue is mitigated by upgradi...

CVE-2024-0977 Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image URLs in the plugin's timeline widget in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output...

WordPress Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Timeline Widget For Elementor Elementor Timeline, Vertical & Horizontal Timeline Type Plugin Vulnerable versions = 1.5.3 Fixed in 1.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0977 Patch priority Low CVSS severity Low 6.5 Developer...

Trellix Agent < 5.7.9 Heap-Based Overflow Vulnerability (SB10396)

The version of Trellix Agent, formerly McAfee Agent or McAfee Policy Orchestrator ePO Agent, installed on the remote host is prior to 5.7.9. It is, therefore, affected by a heap-based overflow vulnerability in TA 5.7.8 and earlier allows a remote user to alter the page heap in the macmnsvc proces...

CVE-2023-0977

creationtimestamp| type| source ---|---|--- 2023-04-03 22:18:53+00:00| seen| Telegram/ucZ2DKqaebb7TxXUn7otbmS-qiVivH-dnfbJ24bZVYmA 2023-04-06 17:20:39+00:00| seen| https://t.me/cibsecurity/61339...

CVE-2023-0977

A heap-based overflow vulnerability in Trellix Agent Windows and Linux version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable...

CVE-2023-0977

A heap-based overflow vulnerability in Trellix Agent Windows and Linux version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable...

CVE-2023-0977

CVE-2023-0977 describes a heap-based overflow in Trellix Agent (Windows and Linux) up to version 5.7.8. The vulnerability lets a remote user alter the page heap in the macmnsvc process memory block, causing the Trellix Agent service to become unavailable. Affected software: Trellix Agent (formerl...

SUSE CVE-2004-0977

The makeoidjoinscheck script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files...

CVE-2022-0977

creationtimestamp| type| source ---|---|--- 2022-07-22 02:18:36+00:00| seen| https://t.me/cibsecurity/46781...

CVE-2022-0977

Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-0977

CVE-2022-0977 is a Use-After-Free in Chrome OS Browser UI affecting Google Chrome on Chrome OS before 99.0.4844.74, enabling heap corruption via a crafted HTML page when a user engages in specific interactions. The issue is part of a family of Chrome/Chromium UI and rendering vulnerabilities that...

Mageia: Security Advisory (MGASA-2022-0107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0085-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0085-1 advisory. - Use after free in Blink Layout. CVE-2022-0971 - Use after free in Extensions. CVE-2022-0972 - Use after free in Safe Browsing...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0085-1 Rating: important References: 1197163 Cross-References: CVE-2022-0971 CVE-2022-0972 CVE-2022-0973 CVE-2022-0974 CVE-2022-0975 CVE-2022-0976 CVE-2022-0977 CVE-2022-0978 CVE-2022-0979 CVE-2022-0980...

Chromium: CVE-2022-0977 Use after free in Browser UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Stable Channel Update for Desktop

The Stable channel has been updated to 99.0.4844.74 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

CVE-2021-0977

CVE-2021-0977 affects Android 12 via phNxpNHal_DtaUpdate in phNxpNciHal_dta.cc, where an out-of-bounds write results from an incorrect bounds check. This can enable local escalation of privilege with System execution privileges required and does not require user interaction. Multiple connected so...

SUSE: Security Advisory (SUSE-SU-2015:0977-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0968, CVE-2019-0977, CVE-2019-1009, CVE-2019-1010, CVE-2019-1012, CVE-2019-101...