60 matches found
AZL-80538 CVE-2026-29111 affecting package systemd for versions less than 255-26
systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this i...
CVE-2026-29111 systemd: Local unprivileged user can trigger an assert
systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this i...
USN-8119-2 systemd vulnerabilities
USN-8119-1 fixed vulnerabilities in systemd. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that systemd incorrectly handled certain cgroup paths. A local attacker could...
CVE-2026-29111
systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is not an assert, but stack overwriting, with the attacker controlled content. From version v250 and newer this i...
CVE-2024-29111
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...
CVE-2024-29111
creationtimestamp| type| source ---|---|--- 2024-03-19 16:26:38+00:00| seen| https://t.me/ctinow/211685...
CVE-2024-29111
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...
CVE-2024-29111 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...
CVE-2024-29111 WordPress Sitekit plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webvitaly Sitekit allows Stored XSS.This issue affects Sitekit: from n/a through 1.6...
CVE-2024-29111
CVE-2024-29111 affects Sitekit (Webvitaly Sitekit) up to version 1.6. Root cause: Improper neutralization of input during web page generation enabling Stored XSS. Impact: Stored cross-site scripting on affected Sitekit pages. No patch/fix details provided in the available documents.
WordPress Sitekit Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
Software Sitekit Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-29111 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c6b957dd4df3 Credits CatFather Required privilege Contribut...
CVE-2023-29111
creationtimestamp| type| source ---|---|--- 2023-04-11 07:23:06+00:00| seen| https://t.me/cibsecurity/61820...
CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2023-29111
CVE-2023-29111 affects SAP Application Interface Framework (AIF) ODATA service versions 755 and 756. The vulnerability arises from excessive information disclosure in the AIF component, allowing an authorized attacker to leverage disclosed details to potentially exploit the component, with a low ...
CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)
The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...
CVE-2022-29111
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2022-29111
HEVC Video Extensions Remote Code Execution Vulnerability...
CVE-2022-29111
CVE-2022-29111 corresponds to a remote code execution vulnerability in the Windows HEVC Video Extensions codec. The fault is described in connected sources as insufficient input validation within the HEVC codec, enabling an attacker to execute arbitrary code on a vulnerable system. Public exploit...