2766 matches found
Out-of-bounds
In tempresidencynamestore of thermalmetrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Pixel Buffer Error Vulnerability
Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel has a security vulnerability that stems from a lack of bounds checking in the tempresidencynamestore method of thermalmetrics.c, which may result in out-of-bounds writes. This could result in local privilege...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: gitness, kind, hey, dgraph, dynamic-localpv-provisioner, kubernetes-csi-livenessprobe, scorecard, grpcurl, spark-operator, rqlite, sigstore-scaffolding, secrets-store-csi-driver-provider-gcp, nats, kots, nginx-stable, slsa-verifier, flux-notification-controller,...
CVE-2023-43810
CVE-2023-43810 concerns OpenTelemetry instrumentation. Autoinstrumentation may expose an unbounded http_method label, enabling memory exhaustion under large numbers of crafted requests. Affected if the application is instrumented for HTTP handlers and does not filter non-standard methods at CDN/L...
CVE-2023-39323 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, smarter-device-manager-fips, configmap-reload-fips, kind, metrics-server...
CVE-2023-39323 vulnerabilities
Vulnerabilities for packages: metrics-server, kubeflow-katib, kind...
CVE-2023-44263
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-44263
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-44263 WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-44263 WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-44263
CVE-2023-44263 affects the WordPress plugin Riyaz Social Metrics (versions <= 2.2). It is a Stored Cross-Site Scripting (XSS) vulnerability that requires admin+ authentication to exploit. The NVD entry lists a base CVSS v3.1 score of 4.8 (Medium), while PatchStack describes the vulnerability w...
WordPress Plugin Social Metrics Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2023-44263: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
PT-2023-29176 · Unknown · Riyaz Social Metrics
Name of the Vulnerable Software and Affected Versions: Riyaz Social Metrics plugin versions prior to 2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 2.3, update to...
PUB-A-274446016
In tempresidencynamestore of thermalmetrics.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
WordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Software Social Metrics Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44263 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8d2a9afb7ce0 Credits Rio Darmawan Required...
Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
WAN Latency and DC Latency show as "NA" in ADM HDX Insight
customer found "WAN Latency" 、"DC Latency" and some metrics value appears as "NA" in ADM HDX Insight report. Like below:...