6418 matches found
WordPress Tutor LMS plugin <= 2.7.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by justakazh Patchstack Alliance in WordPress Plugin Tutor LMS versions = 2.7.1...
WordPress H5P plugin < 1.15.8 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin H5P versions 1.15.8...
Astra Linux – Vulnerability in Firefox
A nested iframe, which triggers cross-site navigation, may send cookies with the SameSite=Strict or Lax attribute. This vulnerability affects Firefox 128 and Thunderbird 128...
Astra Linux – Vulnerability in Firefox
In violation of the specification, cookie prefixes such as Secure were ignored if they were not capitalized correctly. According to the specification, these prefixes should be checked using a case-insensitive comparison. This could result in the browser not correctly implementing the behaviors...
Astra Linux – Vulnerability in Firefox
The frame iterator could get stuck in a loop when encountering certain Wasm frames, leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...
Astra Linux – Vulnerability in Firefox
Memory safety bugs exist in Firefox 127 and Thunderbird 127. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions less than 128 and...
AZL-42943 CVE-2024-6104 affecting package packer for versions less than 1.9.5-2
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42880 CVE-2024-6104 affecting package cert-manager for versions less than 1.12.12-3
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42910 CVE-2024-6104 affecting package skopeo for versions less than 1.14.2-7
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42928 CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42907 CVE-2024-39291 affecting package kernel for versions less than 6.6.35.1-4
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfxv943init cpcomputemicrocode and rlcmicrocode The function gfxv943initmicrocode in gfxv943.c was generating about potential truncation of output when using the snprintf function. The issue was due...
AZL-42857 CVE-2024-36477 affecting package kernel for versions less than 5.15.160.1-1
In the Linux kernel, the following vulnerability has been resolved: tpmtisspi: Account for SPI header when allocating TPM SPI xfer buffer The TPM SPI transfer mechanism uses MAXSPIFRAMESIZE for computing the maximum transfer length and the size of the transfer buffer. As such, it does not account...
WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Arbitrary SQL Query Execution vulnerability
Unauthenticated Arbitrary SQL Query Execution vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WishList Member X versions 3.26.7...
WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Settings & Users Data Dump vulnerability
Unauthenticated Settings & Users Data Dump vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WishList Member X versions 3.26.7...
WordPress WishList Member X plugin < 3.26.7 - Authenticated Arbitrary File Deletion vulnerability
Authenticated Arbitrary File Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WishList Member X versions 3.26.7...
WordPress WishList Member X plugin < 3.26.7 - Authenticated Privilege Escalation vulnerability
Authenticated Privilege Escalation vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WishList Member X versions 3.26.7...
WordPress Shortcodes by United Themes plugin < 5.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Shortcodes by United Themes versions 5.0.5...
UBUNTU-CVE-2024-5702
Memory corruption in the networking stack could have led to a potentially exploitable crash. This vulnerability affects Firefox 125, Firefox ESR 115.12, and Thunderbird 115.12...
Wordpress FooGallery plugin <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Gallery Custom URL vulnerability discovered by Robert Kruczek ProXy in WordPress Plugin FooGallery versions = 2.4.15...