7180 matches found
CVE-2023-40705
Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-40705
Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-40705
The CVE-2023-40705 entry concerns the VI Web Client (i-PRO VI Web Client) prior to version 7.9.6. The vulnerability is a Stored Cross-Site Scripting (XSS) issue in the Map setting page that allows a remote authenticated attacker to inject arbitrary scripts when accessing a specially crafted page....
PT-2023-27603 · Unknown · Vi Web Client
Name of the Vulnerable Software and Affected Versions: VI Web Client versions prior to 7.9.6 Description: A stored cross-site scripting issue in the Map setting page allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9.6, update to versi...
WordPress Travel Map Plugin < 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Travel Map Type Plugin Vulnerable versions 1.0.1 Fixed in 1.0.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41860 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 4ba841714848 Credits Mika Required privilege...
Linux Kernel Competitive Conditions Problem Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a Competitive Condition Issue vulnerability, which stems from a flaw found in the memory management subsystem, where a competition exists between ...
WordPress Multi-column Tag Map Plugin <= 17.0.26 is vulnerable to Broken Access Control
Software Multi-column Tag Map Type Plugin Vulnerable versions = 17.0.26 Fixed in 17.0.27 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41651 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 543c5fba661a Credits Rio Darmawan Require...
CVE-2023-3636
The WP Project Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.6.4 due to insufficient restriction on the 'saveusersmapname' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modif...
Multiple vulnerabilities in i-PRO VI Web Client
Overview VI Web Client provided by i-PRO Co., Ltd. is Video Insight's video management software. VI Web Client contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2023-38574 Reflected Cross-site Scripting CWE-79 - CVE-2023-39938 View Stored Cross-site Scripting in View...
CVE-2023-24401
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...
CVE-2023-24401 WordPress Mobile Call Now & Map Buttons Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Davidsword Mobile Call Now & Map Buttons plugin = 1.5.0 versions...
CVE-2023-24401
CVE-2023-24401 is a Stored XSS vulnerability in the WordPress plugin Davidsword Mobile Call Now & Map Buttons (versions
kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry
A flaw was found in include/asm-generic/tlb.h in the Linux kernel due to a race condition unmapmappingrange versus munmap. This issue allows a device driver to free a page while it still has stale TLB entries...
kernel: perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map()
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in snruncoremmiomap pcigetdevice will increase the reference count for the returned pcidev, so snruncoregetmcdev will return a pcidev with its reference count increased. We need to...
Malicious code in sso-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ec3637a741345c5082ec0b969e5d295b30baf6cc1647f0f684951624ee0ba64b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
MAL-2023-8036 Malicious code in sso-map (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ec3637a741345c5082ec0b969e5d295b30baf6cc1647f0f684951624ee0ba64b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...
DEBIAN-CVE-2020-22524
Buffer Overflow vulnerability in FreeImageLoad function in FreeImage Library 3.19.0r1828 allows attackers to cuase a denial of service via crafted PFM file...
The vulnerability of the gfx::SourceSurfaceSkia::Map() function in the Firefox web browser allows a hacker to trigger a service denial.
The vulnerability of the gfx::SourceSurfaceSkia::Map function in the Firefox web browser is related to an unvalidated return value. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2025-53198
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the btrfs file system related to incorrect splitting in the btrfs drop extent map range function. This can lead to invalid extent maps being...