UBUNTU-CVE-2024-43899

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer deref in dcn20resource.c Fixes a hang thats triggered when MPV is run on a DCN401 dGPU: mpv --hwdec=vaapi --vo=gpu --hwdec-codecs=all and then enabling fullscreen playback double click on the vid...

WordPress Shield Security plugin < 20.0.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Shield Security versions 20.0.6...

OTRS 安全漏洞

OTRS is a service management solution from the German company OTRS. A security vulnerability exists in OTRS that stems from an improper neutralization of input by an attacker with administrator privileges, allowing cross-site scripting attacks in Process Management targeting other administrators...

CVE-2024-41876

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

CVE-2024-41847

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2022-48923

creationtimestamp| type| source ---|---|--- 2024-08-22 05:07:52+00:00| seen| https://t.me/cvedetector/3852 2025-05-15 12:34:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16473...

DEBIAN-CVE-2022-48889

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof-nau8825: fix module alias overflow The maximum name length for a platformdeviceid entry is 20 characters including the trailing NUL byte. The sofnau8825.c file exceeds that, which causes an obscure error message:...

UBUNTU-CVE-2022-48889

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof-nau8825: fix module alias overflow The maximum name length for a platformdeviceid entry is 20 characters including the trailing NUL byte. The sofnau8825.c file exceeds that, which causes an obscure error message:...

CVE-2024-43880

creationtimestamp| type| source ---|---|--- 2024-08-21 04:00:31+00:00| seen| https://t.me/cvedetector/3707 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

WordPress plugin Event Espresso 4 Decaf 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

CKEditor 安全漏洞

CKEditor is an open source, web-based text editor. A security vulnerability exists in CKEditor4 version 4.22 and later versions, which stems from a vulnerability that allows an attacker to take control of https://cke4.ckeditor.com域...

libreoffice: Ability to trust not validated macro signatures removed in high security mode

A vulnerability was found in versions of LibreOffice from 24.2 to before 24.2.5. When a document containing a signed macro fails verification, LibreOffice will display a warning which the user can choose to ignore the failure and enable the macro anyways...

PT-2024-29875 · 7Twenty · 7Twenty

Name of the Vulnerable Software and Affected Versions: 7Twenty affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. Recommendations: At the moment, there is no information about a...

7Twenty BOT 跨站脚本漏洞

7Twenty BOT is an artificial intelligence-based digital system from 7Twenty. A cross-site scripting vulnerability exists in 7Twenty BOT that stems from improper input neutralization during web page generation...

CVE-2024-42311

creationtimestamp| type| source ---|---|--- 2024-08-17 12:18:05+00:00| seen| https://t.me/cvedetector/3402...

SUSE CVE-2024-23981

Wrap-around error in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2024-24986

Improper access control in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-7144

The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' and 'slideid' parameters in all versions up to, and including, 2.6.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...

Nissan Altima Blind Spot Detection Sensor ECU 安全漏洞

The Nissan Altima Blind Spot Detection Sensor ECU is a blind spot detection sensor from Nissan Japan. A security vulnerability exists in Nissan Altima Blind Spot Detection Sensor ECU version 2022, which arises from an unprotected UDS session in the blind spot detection sensor ECU firmware, allowi...