148 matches found
CVE-2024-56721
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Terminate the erratum1386microcode array The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping will continue iterate the array after it ended. Add an empty entry to...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing null entry in the erratum1386microcode array on the x86/CPU/AMD subsystem...
CVE-2024-1386
CVE-2024-1386 impacts the MailerLite – Signup forms (official) WordPress plugin. It enables Stored Cross-Site Scripting via shortcode attributes in versions 1.5.0–1.7.6, allowing authenticated attackers with contributor-level and higher to inject scripts into pages. The provided documents confirm...
WordPress MailerLite – Signup forms Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
Software MailerLite – Signup forms Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1386 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID cf12af72ac5b Credits Richard Tellen...
RHEL 8 : ovn22.12 (RHSA-2024:1386)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1386 advisory. OVN, the Open Virtual Network, is a system to support virtual network abstraction. OVN complements the existing capabilities of OVS to add native...
Exploit for Server-Side Request Forgery in Fusion_Builder_Project Fusion_Builder
git clone https://github.com/s...
CVE-1999-1386
creationtimestamp| type| source ---|---|--- 2024-01-26 20:16:32+00:00| seen| https://t.me/ctinow/174451...
CVE-2023-1386
creationtimestamp| type| source ---|---|--- 2023-07-24 20:26:13+00:00| seen| https://t.me/cibsecurity/67158 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
BELL-CVE-2023-1386
Bulletin has no description...
CVE-2023-1386
The CVE-2023-1386 entry describes a vulnerability in QEMU’s 9p passthrough filesystem (9pfs). The root cause is that when a local guest user writes an executable with SUID/SGID, the privileged bits are not dropped, enabling potential privilege escalation within the guest and potentially aiding a ...
CVE-2022-1386
creationtimestamp| type| source ---|---|--- 2023-03-10 13:47:05+00:00| published-proof-of-concept| https://t.me/DailyToolz/660 2023-03-10 18:42:57+00:00| published-proof-of-concept| https://t.me/DailyToolz/658 2024-01-09 07:23:02+00:00| seen| https://t.me/arpsyndicate/2725 2025-01-26...
K15351: OpenSSL DTLS ChangeCipherSpec vulnerability CVE-2009-1386
Security Advisory Description ssl/s3pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a DTLS ChangeCipherSpec packet that occurs before ClientHello. CVE-2009-1386 Impact None Security Advisory Status To determine if...
SUSE CVE-2010-1386
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357...
SUSE CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...
CVE-2022-1386
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the...
CVE-2022-1386 Fusion Builder < 3.6.2 - Unauthenticated SSRF
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the...
CVE-2022-1386
CVE-2022-1386 : The WordPress Fusion Builder plugin (before 3.6.2) used with the Avada theme is vulnerable to a server-side request forgery (SSRF). The plugin does not validate a parameter in its forms, allowing an attacker to initiate arbitrary HTTP requests, with the response echoed back to the...
Mageia: Security Advisory (MGASA-2017-0107)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:1386-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
