9754 matches found
CVE-2024-5889
CVE-2024-5889 affects the WordPress plugin Events Manager (Calendar, Bookings, Tickets, etc.) and is a Reflected Cross-Site Scripting vulnerability exploitable via the country parameter in all versions up to 6.4.8. Root cause is insufficient input sanitization and output escaping, allowing unauth...
CVE-2024-5889 Events Manager <= 6.4.8 - Reflected Cross-Site Scripting
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...
PT-2024-37224 · WordPress · The Events Manager
Name of the Vulnerable Software and Affected Versions: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions up to, and including, 6.4.8 Description: The issue is related to Reflected Cross-Site Scripting via the country parameter due to insufficient input...
WordPress plugin Events Manager security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
CVE-2024-2973
creationtimestamp| type| source ---|---|--- 2024-06-28 16:04:42+00:00| published-proof-of-concept| https://t.me/HackingInsights/4014 2024-07-01 08:28:03+00:00| seen| https://t.me/thehackernews/5191 2024-07-01 08:56:31+00:00| seen| https://t.me/KomunitiSiber/2186 2024-07-01 09:03:31+00:00| seen|...
SUSE CVE-2024-39470
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in eventfsfindevents In function eventfsfindevents,there is a potential null pointer that may be caused by calling updateeventsattr which will perform some operations on the member...
CVE-2020-13965
creationtimestamp| type| source ---|---|--- 2024-06-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-06-27 07:06:52+00:00| seen| MISP/2f4aabd1-905a-4667-b431-a7319f429751 2025-02-14 10:09:22+00:00| seen| Telegram/VcMsCDQYQPLwn2p2dVnu04wKaYurHxHCIr7NIBw3mJv46Xk 2025-02-23...
SUSE SLES15 Security Update : kernel (Live Patch 8 for SLE 15 SP5) (SUSE-SU-2024:2205-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2205-1 advisory. This update for the Linux Kernel 5.14.21-1505005539 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an o...
DEBIAN-CVE-2024-39470
In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix a possible null pointer dereference in eventfsfindevents In function eventfsfindevents,there is a potential null pointer that may be caused by calling updateeventsattr which will perform some operations on the member...
CVE-2024-39470
CVE-2024-39470 : In the Linux kernel, a null-pointer dereference could occur in eventfs_find_events() when ei is NULL after update_events_attr, potentially leading to a crash if ei->is_freed is set. The issue has been resolved via kernel patches (stable releases) implementing a guard that retu...
MAL-2024-4123 Malicious code in Be.Vlaandereո.Basisregisters.Testing.Infrastructure.Evеnts (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaandereո.Basisregisters.Testing.Infrastructure.Evеnts (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4159 Malicious code in Be.Vlaanderеո.Basisregistеrs.Testing.Infrastructure.Evеnts (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Be.Vlaanderеո.Basisregistеrs.Testing.Infrastructure.Evеnts (NuGet)
--- -= Per source details. Do not edit below this line.=-...
SUSE-SU-2024:2205-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-1505005539 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event bsc1218259. - CVE-2024-26852: Fixed use-after-free in ip6routempathnotify...
Malicious code in pap-events (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2835 Malicious code in pap-events (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE-SU-2024:2202-1 Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122186 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets bsc1220537. - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsyst...
PT-2024-37524 · Conduit · Conduit
Name of the Vulnerable Software and Affected Versions: Conduit versions v0.6.0 and lower Description: The issue is related to a lack of privilege checking when processing a redaction, allowing a local user to redact any message from users on the same server if they can send redaction events...
SUSE CVE-2024-38568
In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group The perf tool allows users to create event groups through following cmd 1, but the driver does not check whether the array index is out of bounds when writi...