15 matches found
CVE-2022-31026
Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory. Users of the trilogy gem should upgrade to version...
CVE-2025-31026
Cross-Site Request Forgery CSRF vulnerability in Austin Comment Validation Reloaded comment-validation-reloaded allows Stored XSS.This issue affects Comment Validation Reloaded: from n/a through = 0.5...
WordPress Comment Validation Reloaded plugin <= 0.5 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Comment Validation Reloaded versions = 0.5...
CVE-2025-31026
creationtimestamp| type| source ---|---|--- 2025-04-09 16:48:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11119...
CVE-2025-31026
CVE-2025-31026 is a CSRF-to-Stored XSS issue in the WordPress plugin Comment Validation Reloaded. The vulnerability affects Comment Validation Reloaded versions up to 0.5 (n/a through 0.5). The provided metrics cite CVSS 3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW confidentiality/in...
CVE-2023-31026
creationtimestamp| type| source ---|---|--- 2023-11-02 21:22:55+00:00| seen| https://t.me/cibsecurity/73473...
CVE-2023-31026
The CVE-2023-31026 item concerns NVIDIA vGPU software for Windows and Linux, specifically a vulnerability in the Virtual GPU Manager (vGPU plugin) that permits a NULL-pointer dereference, leading to denial of service. Red Hat’s advisory and the NVIDIA vulnerability coverage corroborate that the i...
CVE-2023-31026 CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a NULL-pointer dereference may lead to denial of service...
CVE-2022-31026
creationtimestamp| type| source ---|---|--- 2022-06-09 16:33:18+00:00| seen| https://t.me/cibsecurity/44085...
CVE-2022-31026
CVE-2022-31026 affects the Trilogy client library for MySQL. During authentication, a malicious server can send a crafted authentication packet, causing the client to read up to 12 bytes from an uninitialized variable in stack memory. Public advisories consistently recommend upgrading the trilogy...
CVE-2022-31026 Use of Uninitialized Variable in trilogy
Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory. Users of the trilogy gem should upgrade to version...
CVE-2022-31026 Use of Uninitialized Variable in trilogy
Trilogy is a client library for MySQL. When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory. Users of the trilogy gem should upgrade to version...
CVE-2021-31026
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
Product release: Virtuozzo Infrastructure Platform 3.5 Update 1 (3.5.1-43)
This update provides a new feature as well as fixes and improvements. Vulnerability id: VSTOR-30003 Unable to release node from cluster: 'Unable to send message to any node in ABGW cluster'. Vulnerability id: VSTOR-30135 No read/write data on dashboards if multipath is configured. Vulnerability i...