Lucene search
+L

3542 matches found

OSV
OSV
added 2024/11/27 3:15 p.m.16 views

UBUNTU-CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

7.8CVSS7.6AI score0.00526EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/11/27 12:0 a.m.10 views

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

8.8AI score0.00526EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/11/27 12:0 a.m.24 views

CVE-2024-53920

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point for code completion on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. This unsafe expansion also occurs if a user chooses to...

0.00526EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/26 3:43 p.m.7 views

USN-7129-1 TinyGLTF vulnerability

It was discovered that TinyGLTF performed file path expansion in an insecure way on certain inputs. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

8.8CVSS6AI score0.0279EPSS
SaveExploits1References2
Ubuntu
Ubuntu
added 2024/11/26 3:43 p.m.19 views

USN-7129-1: TinyGLTF vulnerability

It was discovered that TinyGLTF performed file path expansion in an insecure way on certain inputs. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

8.8CVSS8.2AI score0.0279EPSS
SaveExploits1
Akamai Blog
Akamai Blog
added 2024/11/26 2:0 p.m.5 views

Frankfurt Expansion Now Available for All Customers

Over the past year, Akamai’s core and distributed cloud architecture has grown significantly to better serve our customers requiring greater availability, lower latency, and more freedom of choice when it comes to how and where they run applications and workloads...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/22 8:17 p.m.16 views

Security Bulletin: Apache uimaj-core.jar security vulnerability CVE-2017-15691

Summary Apache uimaj-core.jar security vulnerability CVE-2017-15691 in FileNet Content Manager FNCM Content Search Services CSS/Enterprise Content Management Text Search ECMTS. CSS/ECMTS is affected and is potentially vulnerable. Vulnerability Details CVEID:CVE-2017-15691 DESCRIPTION: Apache uima...

6.5CVSS5.8AI score0.09021EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2024/11/19 3:49 a.m.7 views

SUSE CVE-2024-50278

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast...

6.3CVSS6.5AI score0.00262EPSS
SaveExploits0References21
OSV
OSV
added 2024/11/19 2:16 a.m.13 views

UBUNTU-CVE-2024-50278

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table. This happens because expanding the fast...

7.1CVSS6.2AI score0.00262EPSS
SaveExploits0References48
NVD
NVD
added 2024/11/18 4:15 a.m.27 views

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

7.5CVSS0.00783EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/11/18 12:0 a.m.19 views

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

0.00783EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/18 12:0 a.m.13 views

CVE-2019-25220

Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service daemon crash via a flood of low-difficulty header chains aka a "Chain Width Expansion" attack because a node does not first verify that a presented chain has enough work before committing to store it...

6.6AI score0.00783EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/18 12:0 a.m.58 views

CVE-2019-25220

CVE-2019-25220 concerns Bitcoin Core prior to 24.0.1. The issue arises when a node accepts a flood of low‑difficulty header chains and stores them without first verifying that the presented chain has enough work, enabling a denial of service (daemon crash). Public references in the connected data...

7.5CVSS6.7AI score0.00783EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/13 6:15 a.m.11 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS0.0029EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/13 5:49 a.m.16 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS0.0029EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/13 5:49 a.m.68 views

CVE-2024-52268

The CVE-2024-52268 entry concerns the VK All in One Expansion Unit WordPress plugin. A stored cross-site scripting (CWE-79) vulnerability affects versions prior to 9.100.1.0, allowing an attacker to execute arbitrary JavaScript in a user’s browser when visiting a site using the vulnerable plugin....

4.8CVSS6.7AI score0.0029EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/13 5:49 a.m.15 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS6.7AI score0.0029EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/13 5:49 a.m.13 views

CVE-2024-52268

Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product...

4.8CVSS6.3AI score0.0029EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/11/13 12:0 a.m.15 views

JVN#05136799: WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting

"Custom Alert Content" of WordPress Plugin "VK All in One Expansion Unit" provided by Vektor,Inc. contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the web site using the product. Solution Update...

4.8CVSS6.1AI score0.0029EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.6 views

VK All in One Expansion Unit 跨站脚本漏洞

VK All in One Expansion Unit is a plugin from Vektor for extending and enhancing the functionality of a website, which provides several functional modules and tools to help webmasters easily add various features and functionality. A cross-site scripting vulnerability previously existed in VK All ...

4.8CVSS5AI score0.0029EPSS
SaveExploits0References4
Rows per page
Query Builder