Lucene search
+L

794 matches found

CVE
CVE
•added 2025/01/16 8:07 p.m.•75 views

CVE-2025-23926

CVE-2025-23926 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Ajax WP Query Search Filter (versions up to 1.0.7). The issue arises from improper neutralization of user input during web page generation. Public data in the initial record show a CVSS v3.1 base sc...

6.5CVSS7.2AI score0.00227EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/01/16 3:49 a.m.•12 views

SUSE CVE-2024-57801

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

6.7CVSS7.7AI score0.00223EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2025/01/15 3:24 p.m.•15 views

CVE-2024-57801

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

7.8CVSS6.8AI score0.00223EPSS
SaveExploits0References4
OSV
OSV
•added 2025/01/15 1:15 p.m.•9 views

UBUNTU-CVE-2024-57801

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

7.8CVSS6.5AI score0.00223EPSS
SaveExploits0References22
CNNVD
CNNVD
•added 2025/01/15 12:00 a.m.•10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a TC rule recovery issue in the net/mlx5e component when the vport rep is not loaded...

7.8CVSS7.5AI score0.00223EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/12/27 6:30 a.m.•29 views

tecnickcom/tc-lib-pdf-font mishandles fonts

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS6.9AI score0.00561EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2024/12/27 6:30 a.m.•16 views

GHSA-GRHH-R4JJ-8JH7 tecnickcom/tc-lib-pdf-font mishandles fonts

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS7.1AI score0.00561EPSS
SaveExploits0References8
NVD
NVD
•added 2024/12/27 5:15 a.m.•21 views

CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS0.00561EPSS
SaveExploits0References6
OSV
OSV
•added 2024/12/27 5:15 a.m.•12 views

UBUNTU-CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS5.8AI score0.00561EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2024/12/27 12:00 a.m.•11 views

CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.2AI score0.00561EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•20 views

tc-lib-pdf-font 安全漏洞

tc-lib-pdf-font is a Tecnick open source PHP library containing PDF font methods and utilities. A security vulnerability exists in versions prior to tc-lib-pdf-font 2.6.4 that stems from improper font handling...

7.3CVSS6.4AI score0.00561EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/12/27 12:00 a.m.•22 views

CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS5.2AI score0.00561EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/12/27 12:00 a.m.•35 views

CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

0.00561EPSS
SaveExploits0References5
CVE
CVE
•added 2024/12/27 12:00 a.m.•112 views

CVE-2024-56520

The TCPDF PHP library (specifically versions prior to 6.8.0 ) is vulnerable to a flaw in the tc-lib-pdf-font component. The underlying cause is the mishandling of fonts , where FontBBox for Type 1 and TrueType fonts is misparsed . Exploitation of this vulnerability could allow an attacker to exec...

7.3CVSS7AI score0.00561EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•1 views

CVE-2024-56520: Undefined Security Weakness

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS5.7AI score0.00561EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/27 12:00 a.m.•18 views

CVE-2024-56520

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...

7.3CVSS6.7AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•15 views

PT-2024-36829

Name of the Vulnerable Software and Affected Versions tc-lib-pdf-font versions prior to 2.6.4 TCPDF versions prior to 6.8.0 Description The issue is related to the mishandling of fonts, specifically the misparsing of FontBBox for Type 1 and TrueType fonts. This problem affects the management of...

7.5CVSS6.8AI score0.00561EPSS
SaveExploits0References25
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/11/26 4:27 p.m.•6 views

Malicious code in tc-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aa4df0e0793a036928e9181dd63ce9ef72640ebfe8a24284931247421024729 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/11/26 4:27 p.m.•4 views

MAL-2024-11023 Malicious code in tc-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aa4df0e0793a036928e9181dd63ce9ef72640ebfe8a24284931247421024729 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/11/21 7:27 p.m.•33 views

CVE-2024-53044

In the Linux kernel, the following vulnerability has been resolved: net/sched: schapi: fix xainsert error path in tcfblockgetext This command: $ tc qdisc replace dev eth0 ingressblock 1 egressblock 1 clsact Error: block dev insert failed: -EBUSY. fails because user space requests the same block...

5.5CVSS6.7AI score0.00214EPSS
SaveExploits0References4
Rows per page
Query Builder