AZL-51023 CVE-2024-47698 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in rtl2832pidfilter does not exceed 31 to prevent out-of-bounds access. dev-filters is a 32-bit value, so setbit and clearbit functions should...

WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Agile Video Player Lite versions = 1.0...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a smatch warning in the H264 multi-state stateless decoder by the mediatek vcodec driver...

CVE-2024-47224

The CVE concerns Mitel MiCollab’s AWV component, affecting versions prior to 9.8 SP1 FP2 (9.8.1.201). An unauthenticated attacker can exploit inadequate encoding of user input in URLs to perform a CRLF injection, enabling phishing via crafted links. Red Hat and related feeds corroborate the issue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a smatch warning for the H264 stateless decoder in the media:mediatek:vcodec subsystem...

WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...

CVE-2024-47223

CVE-2024-47223 affects the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab up to version 9.8 SP1 FP2 (9.8.1.201). The Red Hat/NCSC/PTSecurity and CVE records describe an unauthenticated SQL injection caused by insufficient input sanitization, enabling access to non-sensitive u...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds access issue in the drm/v3d component in the performance query extension...

PT-2024-41642

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform firmware affected versions not specified Description A memory corruption issue exists in the Qualcomm embedded platform firmware related to the use of memory after it has been freed. This can occur during video...

CVE-2024-47224

A vulnerability in the AWV Audio, Web and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perfo...

CVE-2024-49605

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

CVE-2024-49605

Cross-Site Request Forgery CSRF vulnerability in Avchat.Net AVChat Video Chat allows Stored XSS.This issue affects AVChat Video Chat: from n/a through 2.2...

CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

CVE-2024-49605

CVE-2024-49605 (WordPress Community Lite Video Chat plugin

CVE-2024-49605 WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stefan Nour AVChat Video Chat avchat-3 allows Stored XSS.This issue affects AVChat Video Chat: from n/a through = 2.2...

PT-2024-33560 · Unknown · Avchat Video Chat

Name of the Vulnerable Software and Affected Versions: AVChat Video Chat versions n/a through 2.2 Description: A Cross-Site Request Forgery CSRF vulnerability is present in AVChat Video Chat, allowing Stored Cross Site Scripting XSS. This issue enables attackers to perform unauthorized actions on...

WordPress plugin AVChat Video Chat 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Community Lite Video Chat plugin <= 2.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AVChat Video Chat versions = 2.2...

CVE-2024-49231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cyclop WordPress Video wordpress-video allows Stored XSS.This issue affects WordPress Video: from n/a through = 1.0...

CVE-2024-49231

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Peter CyClop WordPress Video allows Stored XSS.This issue affects WordPress Video: from n/a through 1.0...