CVE-2024-11643

The Accessibility by AllAccessible plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'AllAccessiblesavesettings' function in all versions up to, and including, 1.3.4. This makes it possible for...

WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability

Multiple Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Accessibility Suite versions = 4.18...

About the security content of iOS 18.3 and iPadOS 18.3

About the security content of iOS 18.3 and iPadOS 18.3 This document describes the security content of iOS 18.3 and iPadOS 18.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2025-5312 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: An authentication issue was addressed with improved state management. An attacker with physical access to an unlocked device may be able to access Photos while the app is...

CVE-2025-23725

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

CVE-2025-23725 WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

CVE-2025-23725 WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

CVE-2025-23725

CVE-2025-23725 : An XSS flaw in Accessibility Task Manager, described as "Improper Neutralization of Input During Web Page Generation (XSS)". The Red Hat and NVD entries confirm a Reflected XSS affecting Accessibility Task Manager versions up to 1.2.1 (exact affected range shown as from n/a throu...

PT-2025-5052 · Unknown · Taskmeister Accessibility Task Manager

Name of the Vulnerable Software and Affected Versions: TaskMeister Accessibility Task Manager versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means an attacker can inject malicious script...

WordPress plugin Accessibility Task Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

The vulnerability of the SCADAPack RemoteConnect configuration tool lies in its deserialization mechanism’s flaws, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SCADAPack RemoteConnect configuration tool is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by loading a malicious...

WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Accessibility Task Manager versions = 1.2.1...

The vulnerability of the Action Pack framework for the Ruby interpreter allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Action Pack framework’s Ruby interpreter lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2024-36476

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

DEBIAN-CVE-2024-36476

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

CVE-2024-36476

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

CVE-2024-36476 RDMA/rtrs: Ensure 'ib_sge list' is accessible

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

CVE-2024-36476

CVE-2024-36476 affects the Linux kernel's RDMA/rtrs path. The vulnerability stems from ib_sge list being declared inside the always_invalidate block, which could lead to a NULL pointer dereference and kernel instability. The fix moves the ib_sge list declaration to a scope accessible throughout t...

CVE-2024-36476 RDMA/rtrs: Ensure 'ib_sge list' is accessible

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...