27 matches found
GSD-2022-1002886 s390/gmap: voluntarily schedule during key setting
s390/gmap: voluntarily schedule during key setting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.15 by commit...
PT-2022-31149
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.15 Description The issue is related to the s390/gmap voluntarily scheduling during key setting. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-31927
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the s390/gmap, which voluntarily schedules during key setting. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
CVE-2022-1559
The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfilteredhtml capability is disallowed...
CVE-2021-25057
The Translation Exchange WordPress plugin through 1.0.14 was vulnerable to Authenticated Stored Cross-Site Scripting XSS within the Project Key text field found in the plugin's settings...
LiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting
The plugin does not escape the qcres parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting PoC As admin, enter the following payload in the Domain Key setting of the plugin: Then open...