41 matches found
CVE-2021-24455
CVE-2021-24455 affects the WordPress plugin Tutor LMS – eLearning and online course solution. The vulnerability lies in the Summary field of Announcements, which is not escaped when output inside an attribute, allowing a Stored Cross-Site Scripting (XSS) vulnerability. The issue can be triggered ...
CVE-2021-24455 Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)
The Tutor LMS – eLearning and online course solution WordPress plugin before 1.9.2 did not escape the Summary field of Announcements when outputting it in an attribute, which can be created by users as low as Tutor Instructor. This lead to a Stored Cross-Site Scripting issue, which is triggered...
EulerOS Virtualization 2.9.1 : tpm2-tss (EulerOS-SA-2021-1727)
According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...
EulerOS Virtualization 2.9.0 : tpm2-tss (EulerOS-SA-2021-1752)
According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1727)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1752)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2020-24455
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
CVE-2020-24455
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
AZL-6924 CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
CVE-2020-24455
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
BELL-CVE-2020-24455 CVE-2020-24455 does not affect BellSoft software
Bulletin has no description...
CVE-2020-24455
Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...
CVE-2020-24455
CVE-2020-24455 affects the TPM2 software stack (tpm2-tss) versions older than 3.0.1 and older than 2.4.3. The vulnerability is caused by missing initialization of a variable in the TPM2 source, which may allow a privileged user to escalate privileges via local access. Remediation per connected do...
Huawei EulerOS: Security Advisory for tpm2-tss (EulerOS-SA-2021-1259)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1259)
According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 system APIs. It sits between TPM driver and applications, providing TPM2.0...
EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2021-1278)
According to the version of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - FAPI PolicyPCR not instatiating correctly.CVE-2020-24455 Note that Tenable Network Security has extracted the preceding description block directly...
Fedora 33 : tpm2-tss (2020-1d3fcce2a3)
tpm2-tss 3.0.1 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...
Fedora 32 : tpm2-tss (2020-bb8e3c5548)
tpm2-tss 2.4.3 changed or fixed : Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that ommits PCR checks. All these objects have to be...
123movies.net XSS vulnerability
Vulnerable URL: http://123movies.net/search-movies/%3Cimg%20src=x%20onerror=alert%28String.fromCharCode%2879,80,69,78,66,85,71,66,79,85,78,84,89%29%29%3E.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 24455...
