23 matches found
Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase.
Summary IBM HTTP Server IHS is shipped as a component of IBM DevOps Code ClearCase. Information about a security vulnerability affecting IHS has been published in a security bulletin. CVE-2026-8834, CVE-2026-8852, CVE-2026-8856, CVE-2026-8850, CVE-2026-8854, CVE-2026-8855, CVE-2026-8835,...
CVE-2026-9170
creationtimestamp| type| source ---|---|--- 2026-05-26 19:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmromuyjiz2i 2026-05-26 19:03:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmromx6rrh2n...
CVE-2019-9170 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
CVE-2025-9170 SolidInvoice Tax Rates rates cross site scripting
A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax/rates of the component Tax Rates Module. Such manipulation of the argument Name leads to cross site scripting. The attack can be executed remotely. The exploit is publicly...
MAL-2025-9170 Malicious code in @patrten/doloremque-ut-autem-excepturi (npm)
The package @patrten/doloremque-ut-autem-excepturi was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2017-9170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input- bmp.c:370:25. CVE-2017-9170 Note that Nessus relies on t...
CVE-2024-9170 Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcjproductmeta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-9170 Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode
The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wcjproductmeta shortcode in all versions up to, and including, 7.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-9170
CVE-2024-9170 (Booster for WooCommerce) is a stored cross-site scripting vulnerability in the Booster for WooCommerce WordPress plugin, affecting all versions up to and including 7.2.3. The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the wc...
WordPress Booster for WooCommerce Plugin <= 7.2.3 is vulnerable to Cross Site Scripting (XSS)
Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.2.3 Fixed in 7.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9170 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID cb123e14d09e Credits Francesco Carluc...
GSD-2022-1000257 ARM: 9170/1: fix panic when kasan and kprobe are enabled
ARM: 9170/1: fix panic when kasan and kprobe are enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...
CVE-2019-9170
CVE-2019-9170 affects GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1, due to Incorrect Access Control. The issue is in GitLab CE/EE prior to the fixed releases; versions 11.6.10, 11.7.6, and 11.8.1 include the fixes. Exploitation details are...
CVE-2015-9170
CVE-2015-9170: In Android devices with Qualcomm Snapdragon components (Automobile, Mobile, Wear; including MDM9206/9650, MSM8909W, SD 210–212/205, SD 400/410/12, SD 425/430/450, SD 615/16/415, SD 617/625/650/52, SD 800/808/810/820/820A, SD 835/845/850), an incorrect offset check in wv_dash_core_r...
CVE-2017-9170
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...
CVE-2017-9170
libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...
CVE-2017-9170
CVE-2017-9170 affects AutoTrace 0.31.1: libautotrace.a contains a heap-based buffer overflow in ReadImage (input-bmp.c:370:25). This vulnerability is documented across multiple sources (NVD, Red Hat advisories, CNVD) with the same description; some sources describe potential arbitrary code execut...
CVE-2016-9170
CVE-2016-9170 is rejected/not used and does not represent an active vulnerability.