1824 matches found
PT-2022-32616
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns a data-race around sysctl tcp l3mdev accept in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-32394
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns a data-race around sysctl tcp l3mdev accept in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-32440
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.13, upda...
PT-2022-32371
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description A data-race issue exists around sysctl udp l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.18.15, upda...
PT-2022-32659
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl raw l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.56, upda...
PT-2022-33171
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.325 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.9.325, upda...
PT-2022-32800
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.134,...
PT-2022-32944
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description A data-race issue exists around sysctl tcp fwmark accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.208, upda...
PT-2022-32929
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.208 Description The issue is related to a data-race around sysctl udp l3mdev accept. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
WordPress plugin Accept Stripe Payments cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-2194
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-2194
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Cross site scripting
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2022-2194
The CVE-2022-2194 entry concerns the WordPress Accept Stripe Payments plugin, affected versions before 2.0.64. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient sanitization/escaping of certain plugin settings, enabling an admin (high privilege) to perform XSS even wh...
CVE-2022-2194: Improper Neutralization of Input During Web Page Generation
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
PT-2022-15193
Name of the Vulnerable Software and Affected Versions Accept Stripe Payments WordPress plugin versions prior to 2.0.64 Description The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the plugin's failure to sanitize and escape some of its settings...
WordPress plugin Accept Stripe Payments 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-31156 Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed
Gradle is a build tool. Dependency verification is a security feature in Gradle Build Tool that was introduced to allow validation of external dependencies either through their checksum or cryptographic signatures. In versions 6.2 through 7.4.2, there are some cases in which Gradle may skip that...
javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.Name.accept
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5171561165881344 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
