12809 matches found
kernel: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure
In the Linux kernel, the following vulnerability has been resolved: drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails, call drmpanelremove to avoid memory leak...
CVE-2023-48020
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/task/changeStatus...
OPENSUSE-SU-2023:0368-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 119.0.6045.123 boo1216978 CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 boo1216783 CVE-2023-5480: Inappropriate implementation in Payments CVE-2023-5482: Insufficient data validation in USB CVE-2023-5849: Integer...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
Cross site scripting
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting XSS vulnerability via the Admin panel...
CVE-2023-31754
Optimizely CMS UI before v12.16.0 is affected by a cross-site scripting (XSS) vulnerability in the Admin panel. The root cause is an XSS issue in the Admin interface, leading to potential script injection. Affected software: Optimizely CMS UI prior to 12.16.0. Impact is described as XSS; specific...
Optimizely CMS Security Vulnerability
Optimizely CMS is a content management system from Optimizely, Inc. A security vulnerability exists in Optimizely CMS versions prior to v12.16.0 that stems from a cross-site scripting XSS vulnerability in the Admin panel...
KLA61975 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
VulnCheck KEV: CVE-2022-29007
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication...
VulnCheck KEV: CVE-2022-36642
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentials which makes him able to gain initial access to the control panel with high privilege because the cleartext storage of sensitive...
PT-2023-23450 · Optimizely · Optimizely Cms Ui
Name of the Vulnerable Software and Affected Versions: Optimizely CMS UI versions prior to 12.16.0 Description: The issue is a cross-site scripting XSS vulnerability that can be exploited via the Admin panel. This type of vulnerability allows an attacker to inject malicious scripts into a website...
Statamic CMS remote code execution via front-end form uploads
Impact On front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded regardless of mime validation rules. This only affects forms using the "Forms" feature and not just any arbitrary form. This does not affect the control panel. Patches It has been patched i...
CVE-2023-47129 Statamic CMS remote code execution via front-end form uploads
Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature and not just any arbitrary form. This...
GhostLocker - A “Work In Progress” RaaS
This post was also authored by Anna Širokova Executive Summary In recent years, there has been a noticeable uptick in threat actors venturing into the realm of Ransom-as-a-Service RaaS. Some have emerged as significant threats, while others have faded into obscurity. What makes the current...