In SQLite through 3.31.1 the ALTER TABLE implementation has a use-after-free as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

...

USN-5615-3: SQLite vulnerability

USN-5615-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2020-35525 for Ubuntu 14.04 LTS. Original advisory details: It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could use this issue to cause SQLite to crash...

WordPress Easy Table of Contents plugin < 2.0.66 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Easy Table of Contents versions 2.0.66...

CVE-2024-5573

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5573

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-5573

CVE-2024-5573 affects the Easy Table of Contents WordPress plugin. The vulnerability arises because the plugin does not sanitise/escape certain settings, enabling stored Cross‑Site Scripting (XSS) by high‑privilege users (e.g., editors) even when unfiltered_html is disallowed. Public references (...

PT-2024-36580 · WordPress · Easy Table Of Contents

Name of the Vulnerable Software and Affected Versions: Easy Table of Contents WordPress plugin versions prior to 2.0.66 Description: The issue allows high privilege users, such as editors, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and...

WordPress Easy Table of Contents Plugin < 2.0.66 is vulnerable to Cross Site Scripting (XSS)

Software Easy Table of Contents Type Plugin Vulnerable versions 2.0.66 Fixed in 2.0.66 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5573 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b62983e047fb Credits Dmitrii Ignatyev...

CVE-2024-39362

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-39362

CVE-2024-39362 is cited in Oracle Linux advisory ELSA-2024-12618 and in Nessus, tied to the I2C ACPI subsystem. The described issue is: i2c: acpi: Unbind mux adapters before delete. The sources do not provide exact root-cause details beyond this remediation note. Remediation is to apply the updat...

MAL-2024-6567 Malicious code in aligned-table (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aligned-table (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_list_with_sti_support (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sq-table (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3045 Malicious code in sq-table (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2024-38610

In the Linux kernel, the following vulnerability has been resolved: drivers/virt/acrn: fix PFNMAP PTE checks in acrnvmrammap Patch series "mm: followpte improvements and acrn followpte fixes". Patch 1 fixes a bunch of issues I spotted in the acrn driver. It compiles, that's all I know. I'll...

CVE-2024-4313

The Table Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...

CVE-2024-4313 Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter

The Table Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...

WordPress plugin Table Addons for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-45197 Adminer and AdminerEvo vulnerable to directory traversal and file upload

The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the root of the Adminer directory. The attacker can effectively guess the name of the uploaded file and execute it. Adminer is no longer supported, but this issue was fixed in...