Cross-site Scripting (XSS)

Overview weblate is an A web-based continuous localization system with tight version control integration Affected versions of this package are vulnerable to Cross-site Scripting XSS in the search preview process. An attacker can execute arbitrary HTML or CSS in the authenticated editor interface ...

CVE-2023-53713

CVE-2023-53713 affects the Linux kernel on arm64 with SME in streaming SVE mode. The vulnerability arises from clearing the FFR context field using an unconditional 8-byte store, which may fail to clear the entire field or corrupt memory if the SME vector length is not 64 bytes. The fix replaces ...

kernel: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector length. When saving the SVE state in...