CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

DEBIAN-CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

AZL-9357 CVE-2022-27378 affecting package mariadb for versions less than 10.6.8-1

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

ALPINE-CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

UBUNTU-CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

CVE-2021-36896

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

CVE-2021-36896

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

CVE-2021-36896 WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in Pricing Table WordPress plugin versions = 1.5.2...

CVE-2021-36896

CVE-2021-36896 affects the WordPress plugin Pricing Table (versions ≤ 1.5.2). The vulnerability is an authenticated Stored XSS in the plugin, arising from insufficient sanitization/escaping of input parameters, allowing an attacker with author or higher privileges to execute arbitrary JavaScript ...

WordPress plugin Pricing Table 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Pricing Table plugin 1.5.2 and earlier versions contain a cross-site scripting vulnerability that can be exploited by an...

CVE-2022-1158

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

cmark-gfm Integer overflow Exploit

cmark-gfm, Github's markdown parsing library, is vulnerable to an out-of-bounds write when parsing markdown tables with a high number of columns due to an overflow of the 16bit columns count. cmark-gfm: Integer overflow in table extension cmark-gfm Github's markdown parsing library is vulnerable ...

cmark-gfm Integer overflow

cmark-gfm: Integer overflow in table extension cmark-gfm Github's markdown parsing library is vulnerable to an out-of-bounds write when parsing markdown tables with a high number of columns due to an overflow of the 16bit columns count. Support for parsing tables in a github flavored markdown fil...

kernel security, bug fix, and enhancement update

3.10.0-1160.62.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

Pricing Table <= 1.5.2 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks...

The vulnerability of the `line_table::line_table` function in the ELF and DWARFv4 reading library Libelfin allows a attacker to cause a service failure.

The vulnerability of the linetable::linetable function in the ELF and DWARFv4 reading library Libelfin is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...

The vulnerability of the dwarf::line_table::line_table function in the ELF and DWARFv4 reading library of Libelfin allows a attacker to cause a service failure.

The vulnerability of the dwarf::linetable::linetable function in the ELF and DWARFv4 file reading library Libelfin is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

WordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Pricing Table plugin versions = 1.5.2. Solution No patched version is available...

The vulnerability of the XENMAPSPACE_grant_table function in Xen hypervisors allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XENMAPSPACEgranttable function in Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

WordPress plugin CleanTalk 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress CleanTalk plugin 5.173 and earlier versions have a cross-sit...