22 matches found
BELL-CVE-2026-23424 CVE-2026-23424 does not affect BellSoft software
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-23424
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determine the valid payload size. Verify that the valid...
CVE-2026-23424
creationtimestamp| type| source ---|---|--- 2026-04-03 15:06:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116341394336703085...
CVE-2026-23424
The CVE-2026-23424 vulnerability affects the Linux kernel’s accel/amdxdna component, caused by insufficient validation of the command buffer payload count. The count field in the command header determines the payload size, and the data must not exceed the remaining buffer space. If not properly c...
RHSA-2025:23424 Red Hat Security Advisory: kernel-rt security update
Bulletin has no description...
CVE-2025-23424
Cross-Site Request Forgery CSRF vulnerability in bnovotny Marquee Style RSS News Ticker marquee-style-rss-news-ticker allows Cross Site Request Forgery.This issue affects Marquee Style RSS News Ticker: from n/a through = 3.2.0...
CVE-2025-23424 WordPress Marquee Style RSS News Ticker plugin <= 3.2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in bnovotny Marquee Style RSS News Ticker marquee-style-rss-news-ticker allows Cross Site Request Forgery.This issue affects Marquee Style RSS News Ticker: from n/a through = 3.2.0...
CVE-2025-23424
CVE-2025-23424 affects the Marquee Style RSS News Ticker plugin. Connected sources indicate a Cross-Site Request Forgery (CSRF) vulnerability that can lead to a Stored Cross-Site Scripting (XSS) condition in Marquee Style RSS News Ticker versions up to 3.2.0. The CVSS baseline is 7.1 (AV:N/AC:L/P...
CVE-2025-23424 WordPress Marquee Style RSS News Ticker plugin <= 3.2.0 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in bnovotny Marquee Style RSS News Ticker marquee-style-rss-news-ticker allows Cross Site Request Forgery.This issue affects Marquee Style RSS News Ticker: from n/a through = 3.2.0...
CVE-2023-23424
creationtimestamp| type| source ---|---|--- 2023-12-29 04:26:18+00:00| seen| https://t.me/ctinow/160304 2023-12-30 01:31:48+00:00| seen| https://t.me/cibsecurity/73866 2024-01-20 15:46:10+00:00| seen| https://t.me/ctinow/170657...
CVE-2023-23424
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...
CVE-2023-23424
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...
CVE-2023-23424
Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution...
CVE-2023-23424
CVE-2023-23424 affects some Honor products via a file-writing vulnerability that can lead to code execution. The available sources consistently describe a security issue in Honor firmware/software components enabling remote-like exploitation with no user interaction, high impact to confidentialit...
Security Bulletin: Ansi-html is vulnerable to CVE-2021-23424 used in IBM Maximo Application Suite
Summary IBM Maximo Application Suite - Monitor Component uses the package ansi-html which is vulnerable to CVE-2021-23424. Vulnerability Details CVEID:CVE-2021-23424 DESCRIPTION: Node.js ansi-html module is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS...
-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0726react (=0.1.1) +24129 more potentially affected by CVE-2021-23424 via ansi-html (>=0.0.4 <=0.0.7)
ansi-html NPM version =0.0.4, =1.0.1, =1.1.0 - 0726react =0.1.1 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 - 0xgank-tea-characteristic =1.0.0 -...
CVE-2021-23424
This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...
CVE-2021-23424
creationtimestamp| type| source ---|---|--- 2021-08-18 20:17:03+00:00| seen| https://t.me/cibsecurity/27548...
CVE-2021-23424
This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time...
CVE-2021-23424
CVE-2021-23424 affects the Node.js package ansi-html . The provided documents describe a denial-of-service condition caused by a regular-expression Denial-of-Service (ReDoS) flaw in processing input, potentially allowing an attacker to consume resources and degrade availability. Several IBM advis...