CVE-2021-24387 Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)

The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ctcommunity parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context...

CVE-2020-24387

CVE-2020-24387 affects yubihsm-shell up to version 2.0.2, where yh_create_session() does not validate the device session id, allowing an invalid session id to cause out-of-bounds reads/writes in the session array and potential DoS. Public details modestly describe the impact as a denial of servic...