CVE-2022-0426

The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the wooseacategoriesdropdown AJAX action available to any authenticated user, leading to a Reflected Cross-Site Scripting...

CVE-2022-0434

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

CVE-2022-0434

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

Sql injection

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

CVE-2022-0434 Page Views Count < 2.4.15 - Unauthenticated SQL Injection

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

PT-2022-13182

Name of the Vulnerable Software and Affected Versions Page View Count WordPress plugin versions prior to 2.4.15 Description The issue allows unauthenticated attackers to perform SQL injection attacks due to the lack of sanitization and escaping of the post ids parameter in a SQL statement via a...

PT-2022-37941

Уязвимость функции at91sam9g20ek audio probe модуля sound/soc/atmel/sam9g20 wm8731.c поддержки звука SoC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2022-0434: Improper Neutralization of Special Elements used in an SQL Command

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the postids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks...

WordPress plugin Page View Count SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin...

PT-2022-36857

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state indicates a problem with loading a font, specifically involving the functions pdfi count cff...

WordPress Easy Post Views Count plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Post Views Count plugin versions = 1.0.2. Solution Update the WordPress Easy Post Views Count plugin to the latest available version at least 1.0.5...

PT-2022-28859

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description A reference count leak was discovered in the uniphier spi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-28944

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.8 Description The issue is related to a reference count leak in the uniphier spi probe function. This leak was introduced in version v5.6 and is fixed in version v5.16.8. The actual impact and attack...

PT-2022-28688

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description The issue is related to reference count leaks in rpc sysfs xprt state change. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-28763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.10 Description The issue is related to reference count leaks in rpc sysfs xprt state change. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2025-8031

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue was found in the Linux kernel's NFSv4.2 implementation, specifically in the nfs42 proc copy notify function. The issue occurs in two error paths where the...

PT-2022-28505

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description A reference count leak was discovered in the uniphier spi probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

Allocation of Resources Without Limits or Throttling

Overview std/archive/zip is a Go standard library package std/archive/zip Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. Go Vulnerability Report: via the NewReader or OpenReader functions. An attacker can cause a panic or trigger an...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of the WordPress Themify Portfolio Post...

GHSA-X4QX-4FJV-HMW6 Integer overflow leading to crash in Tensorflow

Impact The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation: python import tensorflow as tf import numpy as np tf.rawops.SparseCountSparseOutput indices=1,1, values=2, denseshape=2 31, 2 32,...