Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with login access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

Denial Of Service (DoS)

virtualbox is vulnerable to Denial of Service DoS. The vulnerability allows low privileged users with logon access to run executes to compromise Oracle VM VirtualBox. This can be exploited as a frequently repeatable crash rendering the VM unavailable...

github.com/openshift/apiserver-library-go Improper Input Validation vulnerability

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...

Design/Logic Flaw

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...

CVE-2023-0229

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-privileged users to set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context...

CVE-2021-37500

Directory traversal vulnerability in Reprise License Manager RLM web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server...

PT-2023-14077 · Nvidia · Nvidia Dgx A100

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 affected versions not specified Description: The issue is related to a vulnerability in SBIOS in the SmiFlash component, allowing a local user with elevated privileges to read, write, and erase flash. This may lead to code...

EXFO BV-10 信任管理问题漏洞

The EXFO BV-10 is a low-cost, easy-to-configure, purpose-built, intelligent performance endpoint device from EXFO Canada. The EXFO BV-10 is vulnerable to a trust management issue that stems from undocumented hard-coded privileged users...

CVE-2022-23509

Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes cluster. The communication between GitOps...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2023-1036)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-1587 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0.x through 9.4.0.x Description: The issue is related to the disclosure of sensitive information through log files in the IPMI interface of the PowerScale OneFS operating system. A low-privileged user with...

PT-2023-14254 · WordPress · Letsrecover

Name of the Vulnerable Software and Affected Versions: LetsRecover WordPress plugin versions prior to 1.2.0 Description: The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter before it is used in a SQL statement. This can be exploited by...

CVE-2021-24942

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment...

PT-2022-26506 · WordPress · Plugin Logic Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Plugin Logic WordPress plugin versions prior to 1.0.8 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by hi...

Sidebar Widgets by CodeLights <= 1.4 - Admin+ Stored Cross Site Scripting

The plugin does not properly sanitize or escape the Extra CSS class parameter, allowing high privileged users, such as an administrator to inject arbitrary web scripts into pages, even when the unfiltered html capability is disabled e.g in multisite setups...

Cross site scripting

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due to improper output escaping on post/page/media titles. This makes it possible for attackers to inject arbitrary web scripts on the permalink-manager page if...

Cross site scripting

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to an Image Hover in versions 9.8.1 to 9.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

PT-2022-26232 · WordPress · Image Hover Effects Ultimate

Name of the Vulnerable Software and Affected Versions: Image Hover Effects Ultimate plugin for WordPress versions 9.8.1 through 9.8.4 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in several values that can be added to ...