5052 matches found
WordPress plugin WP Less Compiler has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...
PT-2025-9453
Name of the Vulnerable Software and Affected Versions WP Less Compiler versions 1.3.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows attackers to inject malicious scripts...
CVE-2025-25142: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Jake Group WP Less Compiler wp-less-compiler allows Stored XSS.This issue affects WP Less Compiler: from n/a through = 1.3.0...
(Pwn2Own) Apple Safari B3 JIT Compiler Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler...
CVE-2024-36280
Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
RLSA-2025:1338 Moderate: gcc-toolset-14-gcc security update
The gcc-toolset-14-gcc package contains the GNU Compiler Collection version 14. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...
RHSA-2025:1346 Red Hat Security Advisory: gcc security update
Bulletin has no description...
CVE-2024-36280
Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-39365
Uncontrolled search path for the FPGA Support Package for the IntelR oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-36280
Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-36280
CVE-2024-36280 affects Intel® High Level Synthesis Compiler software before version 24.2. The vulnerability is an uncontrolled search path issue in the compiler, which could allow an authenticated local attacker to escalate privileges. Affected product: Intel® High Level Synthesis Compiler prior ...
RHSA-2025:1308 Red Hat Security Advisory: gcc security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: gcc-toolset-14-gcc security update
An update for gcc-toolset-14-gcc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Intel oneAPI DPC++/C++ Compiler code-related vulnerabilities
Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2024.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to enable elevation of...
CVE-2024-36280: Uncontrolled Search Path Element
Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-39365: Uncontrolled Search Path Element
Uncontrolled search path for the FPGA Support Package for the IntelR oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2025-6648 · Intel · Intel High Level Synthesis Compiler
Name of the Vulnerable Software and Affected Versions: IntelR High Level Synthesis Compiler versions prior to 24.2 Description: The issue is related to an uncontrolled search path in some IntelR High Level Synthesis Compiler software. This may allow an authenticated user to potentially enable...
Small praise for modern compilers - A case of Ubuntu printing vulnerability that wasn’t
By Aleksandar Nikolich Earlier this year, we conducted code audits of the macOS printing subsystem, which is heavily based on the open-source CUPS package. During this investigation, IPP-USB protocol caught our attention. IPP over USB specification defines how printers that are available over USB...
