25 matches found
CVE-2021-31256
Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2025-31256
creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g3jdvg2h 2025-05-13 01:19:16+00:00| seen| https://t.me/cvedetector/25121 2025-05-13 20:31:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16224...
CVE-2025-31256
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...
CVE-2025-31256
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...
CVE-2024-31256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...
CVE-2024-31256
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...
CVE-2024-31256 WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...
CVE-2024-31256 WordPress WebinarPress plugin <= 1.33.10 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebinarPress allows Reflected XSS.This issue affects WebinarPress: from n/a through 1.33.10...
CVE-2024-31256
CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...
WordPress WebinarPress Plugin <= 1.33.10 is vulnerable to Cross Site Scripting (XSS)
Software WebinarPress Type Plugin Vulnerable versions = 1.33.10 Fixed in 1.33.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31256 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5bfc876c299b Credits Le Ngoc Anh Required privilege...
SUSE CVE-2022-31256
A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...
SUSE SLES12 Security Update : sendmail (SUSE-SU-2022:3898-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3898-1 advisory. - A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUS...
SUSE: Security Advisory (SUSE-SU-2022:3899-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:3898-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : sendmail (SUSE-SU-2022:3899-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3899-1 advisory. - A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail syste...
SUSE-SU-2022:3899-1 Security update for sendmail
This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script bsc1204696, bsc1202937...
SUSE-SU-2022:3898-1 Security update for sendmail
This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script bsc1204696, bsc1202937...
CVE-2022-31256
creationtimestamp| type| source ---|---|--- 2022-10-26 12:27:16+00:00| seen| https://t.me/cibsecurity/52089 2025-05-09 19:26:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15820...
CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script
A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...
CVE-2022-31256
CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...