WordPress plugin Saphali LiqPay for donation: cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Oracle VM VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software for Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

FFmpeg Debian Code Execution

The vulnerability of the FFmpeg multimedia library in the Debian GNU/Linux operating system is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to trigger an octath in the service or execute arbitrary code...

HEVC Video Extensions Code Execution

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DirectX Graphics Kernel File DoS

The vulnerability of the DirectX Graphics Kernel File component in the Windows operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Qualcomm Embedded Software Data Compromise

The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2021-5030

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description The issue is related to insufficient input data sanitization in the implementation of the runAgentRestarter method in the Ivanti Avalanche mobile device management system. This can be...

Intel Graphics Driver Input Validation

The vulnerability of Intel Graphics Drivers’ drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

Oracle VM VirtualBox Core Component Data Compromise

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2020-12497

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

CVE-2020-12497 Phoenix Contact Automation Worx <= 1.87: stack-based overflow

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

Intel Active Management Technology Buffer Overflow Privilege Escalation

The vulnerability of Microprogramming Software under Intel Active Management Technology exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

Intel NUC Kit Privilege Escalation

The vulnerability in the built-in software of the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

PT-2019-4790

Name of the Vulnerable Software and Affected Versions SIMATIC S7-1500 CPU versions V2.0 through V2.5 SIMATIC S7-1500 CPU versions V1.8.5 and earlier Description A vulnerability has been identified that could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the...