141 matches found
Debian dla-4201 : libvpx-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4201 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4201-1 [email protected] https://www.debian.org/lts/security/...
CVE-2025-5283 vulnerabilities
Vulnerabilities for packages: firefox, chromium...
CVE-2025-5283 vulnerabilities
Vulnerabilities for packages: chromium, firefox, firefox-esr...
Chromium: CVE-2025-5283 Use after free in libvpx
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
Debian: Security Advisory (DSA-5928-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-5928 : libvpx-dev - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5928 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5928-1 [email protected] https://www.debian.org/security/...
CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5283
creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lellrnzo2 2025-05-27 22:00:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114582043604330318 2025-05-29...
CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-5283
The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-5283
creationtimestamp| type| source ---|---|--- 2024-07-13 08:49:42+00:00| seen| https://t.me/cvedetector/803...
CVE-2024-5283 WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing
The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-5283 WP Affiliate Platform < 6.5.1 - Reflected XSS via Lead Editing
The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-5283
creationtimestamp| type| source ---|---|--- 2023-09-30 00:38:03+00:00| seen| https://t.me/cibsecurity/71337...
CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...
CVE-2023-5283
SourceCodester Engineers Online Portal 1.0 contains a SQL injection vulnerability in teacher_signup.php caused by unsafely handling the firstname/lastname parameters. The issue can be exploited remotely and an exploit has been disclosed publicly. Affected component is the login/registration flow ...
CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...
K37510383: Linux kernel SCTP vulnerability CVE-2015-5283
Security Advisory Description The sctpinit function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service panic or memory corruption by creating SCTP sockets before all of the steps...