Lucene search
K

5 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/19 12:0 a.m.3 views

The vulnerability of the xorg-x11-server package, related to the use of memory after it is freed during the processing of Button Action objects, allows for increasing privileges and executing arbitrary code in the root context.

The vulnerability of the xorg-x11-server package is related to the use of memory after it is freed during the processing of Button Action objects. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in the root context...

7.8CVSS7AI score0.01587EPSS
Exploits0References34Affected Software10
Zero Day Initiative
Zero Day Initiative
added 2024/01/04 12:0 a.m.34 views

X.Org Server RecalculateMasterButtons Out-Of-Bounds Access Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of Button...

7.8CVSS7.7AI score0.01587EPSS
Exploits0References1
Prion
Prion
added 2014/10/16 7:55 p.m.21 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation pa...

4.3CVSS6.2AI score0.02053EPSS
Exploits3References4Affected Software1
Cvelist
Cvelist
added 2014/10/16 7:0 p.m.53 views

CVE-2014-7181

Cross-site scripting XSS vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation pa...

5.7AI score0.02053EPSS
Exploits3References4
Patchstack
Patchstack
added 2014/09/25 12:0 a.m.34 views

WordPress MaxButtons Plugin <= 1.26.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "id" parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation page. Solution Update the plugin...

4.3CVSS2.7AI score0.02053EPSS
Exploits3References1Affected Software1
Rows per page
Query Builder