197 matches found
PT-2024-39218 · WordPress · Beam Me Up Scotty – Back To Top Button
Name of the Vulnerable Software and Affected Versions: Beam me up Scotty – Back to Top Button plugin for WordPress versions up to, and including, 1.0.21 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This...
WordPress Beam me up Scotty – Back to Top Button Plugin <= 1.0.21 is vulnerable to Cross Site Scripting (XSS)
Software Beam me up Scotty – Back to Top Button Type Plugin Vulnerable versions = 1.0.21 Fixed in 1.0.22 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8741 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b85fc952fded...
CVE-2023-50809
CVE-2023-50809 affects Sonos devices (Amp, Arc, Arc SL, Beam, Beam Gen 2, Beam SL, Five) due to a stack buffer overflow in the mt_7615.ko wireless driver during WPA2 four-way handshake negotiation. The root cause is improper validation of an information element, enabling remote code execution wit...
CVE-2023-50809
In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...
GHSA-CGVX-9447-VCCH vulnerabilities
Vulnerabilities for packages: nemo, py3-nltk, apache-beam-python-3.11-sdk...
CVE-2024-39705 vulnerabilities
Vulnerabilities for packages: nemo, py3-nltk, apache-beam-python-3.11-sdk...
Malicious code in @mosfe/beam-plugin-s3plus (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1819 Malicious code in @mosfe/beam-plugin-s3plus (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1818 Malicious code in @mosfe/beam-lint-config (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mosfe/beam-git-util (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1817 Malicious code in @mosfe/beam-git-util (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @mosfe/beam (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1816 Malicious code in @mosfe/beam (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-H95X-26F3-88HR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...
CVE-2024-28397 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...
CVE-2024-35195 vulnerabilities
Vulnerabilities for packages: reflex, request-1276, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, kubeflow-pipelines, patroni, py3-torchvision-cuda-11.8, apache-beam-python-3.11-sdk, kubeflow-katib, airflow, confluent-docker-utils, ggshield, py3-pipenv, mlflow, az, checkov,...
PT-2026-3950
Name of the Vulnerable Software and Affected Versions Beam versions 0.1.552 beta9 Description A directory traversal issue exists in Beam beta9 version 0.1.552. This allows a remote attacker to potentially access sensitive information through the joinCleanPath function. Recommendations At the...
The vulnerability of embedded software developed by Qualcomm, related to deficiencies in the use of the assert() function, allows attackers to trigger a service failure.
The vulnerability of embedded software developed for Qualcomm chips lies in the improper implementation of the channel bandwidth division mechanism and the switching between subbands when performing Beam Switching. This occurs due to the use of the assert function. Exploiting this vulnerability c...
