209 matches found
CVE-2021-23150
Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin = 1.0.77.31 versions...
Cross site scripting
Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin = 1.0.77.31 versions...
CVE-2021-23209 WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated admin user role Persistent Cross-Site Scripting XSS vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin versions = 1.0.77.32...
CVE-2021-23150
The CVE-2021-23150 entry describes an Authenticated Stored Cross-Site Scripting (XSS) vulnerability in the WordPress AMP for WP – Accelerated Mobile Pages plugin up to version 1.0.77.31. Affected component: AMP for WP plugin; root cause: stored XSS exploitable by users with admin+ privileges. Imp...
PT-2022-9364 · WordPress · Amp For Wp
Name of the Vulnerable Software and Affected Versions: AMP for WP – Accelerated Mobile Pages plugin versions = 1.0.77.31 Description: An Authenticated Stored Cross-Site Scripting XSS issue was found. This issue affects users with admin+ privileges. Recommendations: For AMP for WP – Accelerated...
PT-2022-9377 · WordPress · Amp For Wp
Name of the Vulnerable Software and Affected Versions: AMP for WP – Accelerated Mobile Pages WordPress plugin versions = 1.0.77.32 Description: The issue concerns Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities. These vulnerabilities require an admin user role to exploi...
WordPress plugin Accelerated Mobile Pages 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2022-0982
The CVE-2022-0982 entry concerns Accel-PPP (Accel-Ppp) server code: telnet_input_char copies user input cmdline_len into a fixed buffer b->buf without bounds checking, causing memory corruption. This vulnerability can be remotely triggered when a server connects to a malicious client, enabling...
PYSEC-2022-158
Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...
Google TensorFlow 代码问题漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from TensorFlow triggering null pointer dereferences if default settings are used when building the XLA compilation cache. No...
Incorrect hash in sha2
The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
Design/Logic Flaw
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
CVE-2021-45696
An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used...
Cybersecurity Trends from the Global Pandemic
The past 18 months have presented new technology and challenges at an accelerated pace. The only way to keep up with a continuous demand for new features, running workloads at scale, and ensuring applications are resilient is to stay one step ahead...
[SECURITY] Fedora 34 Update: sdrpp-1.0.4-3.fc34
SDR++ is a cross-platform and open source SDR software with the aim of being bloat free and simple to use. Features - Wide hardware support both through SoapySDR and dedicated modules - SIMD accelerated DSP - Full waterfall update when possible. Makes browsing signals easier and more pleasant...
Fedora: Security Advisory for sdrpp (FEDORA-2021-f8ba4a690e)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Intel HAXM 资源管理错误漏洞
Intel HAXM Intel Hardware Accelerated Execution Manager is a cross-platform hardware-assisted virtualization engine hypervisor from Intel Corporation that is widely used as a gas pedal for Android Emulator and QEMU. Intel HAXM suffers from a resource management error vulnerability, which arises...
ALSA-2021:1804 Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Mesa provides a 3D graphics API that is compatible with Open Graphics Library OpenGL. It also provides hardware-accelerated...
