CVE-2024-1917

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet...

CVE-2024-1917

Integer Overflow or Wraparound vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series and MELSEC-L Series CPU modules allows a remote unauthenticated attacker to execute malicious code on a target product by sending a specially crafted packet...

CVE-2024-1917

CVE-2024-1917 is an Integer Overflow/Wraparound vulnerability in Mitsubishi Electric MELSEC-Q/L Series CPU modules that allows a remote unauthenticated attacker to execute malicious code by sending a crafted packet. Affected products include MELSEC-Q Series and MELSEC-L Series CPU modules (e.g., ...

CVE-2023-1917

CVE-2023-1917 — PowerPress for WordPress : A Stored Cross-Site Scripting (XSS) vulnerability exists in PowerPress versions up to and including 10.0, caused by insufficient input sanitization and output escaping in the shortcode handling (powerpress_shortcode_handler) and related options. Authenti...

WordPress PowerPress Podcasting Plugin <= 10.0 is vulnerable to Cross Site Scripting (XSS)

Software PowerPress Podcasting Type Plugin Vulnerable versions = 10.0 Fixed in 10.0.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1917 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 2e844f252ce9 Credits Alex Thomas...

SUSE CVE-2013-1917

Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service hypervisor crash by triggering a GP fault, which is not properly handled by another IRET instruction...

Amazon Linux 2 : python3 (ALAS-2023-1917)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1917 advisory. An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs...

Oracle Linux 8 : xorg-x11-server / and / xorg-x11-server-Xwayland (ELSA-2022-1917)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1917 advisory. - CVE fix for: CVE-2021-4008 2030162, CVE-2021-4009 2030172, CVE-2021-4010 2030175, CVE-2021-4011 2030181 - CVE fix for: CVE-2021-4008 2038066,...

AlmaLinux 8 : xorg-x11-server and xorg-x11-server-Xwayland (ALSA-2022:1917)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1917 advisory. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs...

RHEL 8 : xorg-x11-server and xorg-x11-server-Xwayland (RHSA-2022:1917)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1917 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical use...

CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:1917)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1917 advisory. - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds acces...

CVE-2021-1917

creationtimestamp| type| source ---|---|--- 2021-10-20 12:35:07+00:00| seen| https://t.me/cibsecurity/30851...

CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1917

CVE-2021-1917 is a memory-allocation failure–driven null pointer dereference in Qualcomm’s DIAG on Snapdragon platforms (Snapdragon Auto/Compute/Connectivity/Industrial IOT/Wearables). The issue is triggered locally and can lead to a crash with HIGH impact to confidentiality, integrity, and avail...

CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

SUSE: Security Advisory (SUSE-SU-2021:1917-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-tools / etc (SUSE-SU-2021:1917-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1917-1 advisory. - CVE-2021-3541: Fixed exponential entity expansion attack bypasses all existing protection mechanisms. bsc1186015 Tenable has extracted the...

SUSE: Security Advisory (SUSE-SU-2013:1075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1917

The CVE-2020-1917 issue is a concrete bug in xbuf_format_converter (part of exif_read_data) in HHVM. It appends a terminating null without the normal append path, enabling an out-of-bounds write when the buffer is full. Affected HHVM versions include: prior to 4.56.3, 4.57.0–4.80.1, 4.81.0–4.93.1...