11697 matches found
The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips allows attackers to disclose protected information.
The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to the use of insufficiently random values. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to disclose protected information or cause system failures.
The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...
The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm chips allows a hacker to execute arbitrary code.
The vulnerability of the TZ Secure OS microprogramming system in embedded Qualcomm chips is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Command or parameter injection via unique embedded switch SNMP commands (CVE-2024-5461)
Implementation of the Simple Network Management Protocol SNMP operating on the Brocade 6547 FC5022 embedded switch blade, makes internal script calls to system.sh from within the SNMP binary. An authenticated attacker could perform command or parameter injection on SNMP operations that are only...
Lenovo XClarity Controller 安全漏洞
Lenovo XClarity Controller Lenovo XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller. An attacker can exploit the vulnerability to elevate privileges...
CVE-2024-41110
Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass authorization plugins AuthZ under specific circumstances. The base likelihood of this being...
CVE-2024-37959
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Atlas Public Policy Power BI Embedded for WordPress allows Stored XSS.This issue affects Power BI Embedded for WordPress: from n/a through 1.1.7...
CVE-2024-37959
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Atlas Public Policy Power BI Embedded for WordPress allows Stored XSS.This issue affects Power BI Embedded for WordPress: from n/a through 1.1.7...
CVE-2024-37959 WordPress Power BI Embedded for WordPress plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Atlas Public Policy Power BI Embedded for WordPress allows Stored XSS.This issue affects Power BI Embedded for WordPress: from n/a through 1.1.7...
CVE-2024-37959
CVE-2024-37959 is a stored XSS vulnerability in the Power BI Embedded for WordPress plugin, affecting WordPress installations using Power BI Embedded for WordPress up to version 1.1.7. The issue is described as an authenticated Stored XSS vulnerability during web page generation. Exploitation req...
CVE-2024-37960 WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Chris Coyier CodePen Embedded Pens Shortcode allows Stored XSS.This issue affects CodePen Embedded Pens Shortcode: from n/a through 1.0.0...
CVE-2024-37960
CVE-2024-37960 is a stored XSS in the WordPress plugin CodePen Embedded Pens Shortcode (versions <= 1.0.0). The vulnerability stems from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected: CodePen Embedded Pens Shortcode,
PT-2024-27866 · Codepen · Codepen Embedded Pens Shortcode
Name of the Vulnerable Software and Affected Versions: CodePen Embedded Pens Shortcode versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...
PT-2024-27864 · Microsoft · Power Bi Embedded For Wordpress
Name of the Vulnerable Software and Affected Versions: Power BI Embedded for WordPress versions 1.1.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks...
CVE-2024-20395
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such ...
CVE-2024-20395
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attacker to gain access to sensitive session information. This vulnerability is due to insecure transmission of requests to backend services when the app accesses embedded media, such ...
CVE-2024-27090 Decidim vulnerable to data disclosure through the embed feature
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embbeded such as a...
Decidim vulnerable to data disclosure through the embed feature
Impact If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embedded such as a Participatory Process, an Assembly, a Proposal, a Result, etc, then some data of this resource could be accessed. Patches version 0.27.6...
WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Jean Tirstan T Patchstack Alliance in WordPress Plugin CodePen Embedded Pens Shortcode versions = 1.0.0...
WordPress Power BI Embedded for WordPress plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Power BI Embedded for WordPress versions = 1.1.7...