1386 matches found
UBUNTU-CVE-2023-52988
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center...
CVE-2023-52988 ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center...
CVE-2023-52988: Improper Validation of Array Index
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ALSA hda/via component potentially accessing negatively indexed arrays in the addsecretdacpath function...
CVE-2025-30602
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...
CVE-2025-30602: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alphasis Related Posts via Categories related-posts-via-categories allows Stored XSS.This issue affects Related Posts via Categories: from n/a through = 2.1.2...
PT-2025-12641
Name of the Vulnerable Software and Affected Versions alphasis Related Posts via Categories versions n/a through 2.1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the alphasi...
CVE-2024-13805
The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-1505
The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.6.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-1513: Improper Neutralization of Input During Web Page Generation
The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Name and Comment field when commenting on photo gallery entries in all versio...
PT-2025-9060
Name of the Vulnerable Software and Affected Versions Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress versions up to, and including, 26.0.0.1 Description The issue is related to Stor...
CVE-2024-9285
CVE-2024-9285 affects Tu Yafeng Via Browser for Android up to version 5.9.0. The issue stems from how the Javascript Bridge component is processed, enabling a remote attacker to trigger a cross-site scripting vulnerability. This is described across multiple sources, with public disclosure and a r...
CVE-2024-9285: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue affects some unknown processing of the component Javascript Bridge. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
Viayoo Via Browser 代码注入漏洞
Viayoo Via Browser is a lightweight free Android web browser from Viayoo. A code injection vulnerability exists in Viayoo Via Browser version 5.9.0 and prior versions, which stems from improper handling of the Javascript Bridge component...
PT-2025-8972 · Tu Yafeng · Via Browser
Name of the Vulnerable Software and Affected Versions: Tu Yafeng Via Browser versions up to 5.9.0 Description: A problem was found in the Javascript Bridge component of Tu Yafeng Via Browser, which can lead to cross-site scripting. The attack may be initiated remotely. The issue affects some...
CVE-2024-57608
An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...
CVE-2024-57608
An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component...
CVE-2021-3923
creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5224...
CVE-2024-57608
A security vulnerability exists in Viayoo Via Browser version 6.1.0 , a lightweight free Android web browser. A remote attacker can exploit the mark.via.Shell component to achieve remote code execution (RCE). The underlying cause is identified as CWE-77 (Improper Neutralization of Special Element...
