356 matches found
SUSE CVE-2011-1016
The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with 1 Video RAM aka VRAM or 2 the Graphics Translation Table GTT via crafted values...
CVE-2022-27628
Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...
CVE-2022-27628
Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...
CVE-2022-27628
CVE-2022-27628 describes a Cross-Site Request Forgery (CSRF) vulnerability in AA-Team WZone – Lite Version plugin, affecting version 3.1 Lite. The issue enables an attacker to trick authenticated users into performing unintended actions within the application. This is documented across multiple s...
PT-2023-12911 · Aa Team · Aa-Team Wzone – Lite Version
Name of the Vulnerable Software and Affected Versions: AA-Team WZone – Lite Version plugin version 3.1 Lite Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...
CVE-2022-27628: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in AA-Team WZone – Lite Version plugin 3.1 Lite versions...
PT-2022-33786
Name of the Vulnerable Software and Affected Versions apparmor versions prior to v5.15.63 Description A reference count leak was discovered in the aa pivotroot function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.63, update to...
PT-2022-34063
Name of the Vulnerable Software and Affected Versions apparmor versions prior to v5.10.138 linux kernel versions 4.17 through 5.10.137 Description A memory leak issue exists in the aa simple write to buffer function. The actual impact and attack plausibility have not yet been proven...
PT-2022-34489
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description A reference count leak was discovered in the aa pivotroot function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-34383
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.256 Description The issue concerns a reference count leak in the aa pivotroot function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
aa-hr.com Cross Site Scripting vulnerability OBB-2844055
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
aa-ind.com Cross Site Scripting vulnerability OBB-2844056
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-37893
Уязвимость функции aa pivotroot модуля security/apparmor/mount.c компонента обеспечения безопасности AppArmor ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2021-26595
In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...
Code injection
UNSUPPORTED WHEN ASSIGNED In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerabilit...
CVE-2021-26595
In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...
PT-2021-17068 · Directus · Directus
Name of the Vulnerable Software and Affected Versions: Directus versions 8.x through 8.8.1 Description: An attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by viewing the result of the "api-aa" endpoint,...
CVE-2021-26595: Cleartext Storage of Sensitive Information
In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...