7021 matches found
ckeditor4 vulnerable to cross-site scripting
A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...
GHSA-RGX6-RJJ4-C388 ckeditor4 vulnerable to cross-site scripting
A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...
ckeditor4 vulnerable to cross-site scripting
A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...
OTRS AG OTRS 输入验证错误漏洞
OTRS is an application from the German company OTRS. A service management software. OTRS AG An input validation error vulnerability exists in OTRS that arises from the system not properly validating incoming data. An attacker placing a specially crafted URL in the body of an email message could...
AMD 多款产品安全漏洞
AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. A security vulnerability exists in several...
CKEditor 4.0 < 4.16.1 XSS Vulnerability - Linux
CKEditor is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
USN-4985-1: Intel Microcode vulnerabilities | Cloud Foundry
Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that some Intel processors may not properly invalidate cache entries used by Intel Virtualization Technology for Directed I/O VT-d. This may...
CVE-2021-0089
Observable response discrepancy in some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...
CVE-2021-0051
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-8670
Race condition in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8702
Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-8700
Improper input validation in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
DEBIAN-CVE-2020-24511
Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2020-24512
Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
Privilege escalation
Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0089
CVE-2021-0089 concerns an observable response discrepancy in some Intel processors that could let an authorized local user potentially disclose information. The connected sources corroborate that this is a processor/CPU issue affecting Intel CPUs and related Xen/Citrix contexts, with the primary ...
CVE-2020-24486
CVE-2020-24486 is an Intel firmware vulnerability caused by improper input validation in the firmware of some Intel processors. An authenticated local attacker could potentially cause a denial of service. The issue is described in Intel’s advisory as part of a family of firmware vulnerabilities; ...
CVE-2020-24486
Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
CVE-2020-12358
CVE-2020-12358 involves a firmware out-of-bounds write in Intel processors that can allow a privileged local attacker to cause a denial of service. The vulnerability affects Intel processor firmware via local access and is documented in Intel’s advisory Intel-SA-00463, which also lists related CV...