4292 matches found
PT-2022-7936
Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.3.12-RC Description A critical issue has been found in the File Upload component, specifically affecting an unknown function of the file /filemanager/upload/drop. This issue leads to improper privilege management and can ...
CVE-2017-20063: Improper Privilege Management
A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgradi...
PT-2022-28274
Name of the Vulnerable Software and Affected Versions zeroize versions prior to 1.2 Description The issue arises from the failure to implement Drop when the zeroizedrop attribute is used on an enum. This results in memory not being properly zeroed out after it is dropped, contrary to the intended...
GHSA-5J8W-R7G8-5472 Arrow2 allows double free in `safe` code
The struct FfiArrowArray implements deriveClone that is inconsistent with its custom implementation of Drop, resulting in a double free when cloned. Cloning this struct in safe results in a segmentation fault, which is unsound. This derive was removed from this struct. All users are advised to...
PT-2022-13968
Name of the Vulnerable Software and Affected Versions The Drag & Drop Builder WordPress plugin versions prior to 1.4.9.4 Description The issue is related to the lack of sanitization and escaping of some form fields in the plugin, which could allow high privilege users, such as admins, to perform...
CVE-2022-1569: Improper Neutralization of Input During Web Page Generation
The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! WordPress plugin before 1.4.9.4 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks...
CVE-2022-1419
The root cause of this vulnerability is that the ioctl$DRMIOCTLMODEDESTROYDUMB can decrease refcount of drmvgemgemobject created in vgemgemdumbcreate concurrently, and vgemgemdumbcreate will access the freed drmvgemgemobject...
PT-2022-4764
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.18.14 Description An issue was discovered in the Linux kernel where the xfrm expand policies function in net/xfrm/xfrm policy.c can cause a refcount to be dropped twice, potentially leading to a denial of servic...
USN-5439-1 accountsservice vulnerability
Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or stop responding, resulting in a denial of service. CVE-2022-1804...
WordPress Drag & Drop Builder plugin <= 1.4.9.3 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability was discovered by Hitesh Kumar in WordPress Drag & Drop Builder plugin versions = 1.4.9.3. Solution Update the WordPress Drag & Drop Builder plugin to the latest available version at least 1.4.9.4...
WordPress Contact Form, Drag and Drop Form Builder Plugin < 1.8.0 XSS Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2021-42530
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42531
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42532
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CVE-2021-42529
XMP Toolkit SDK version 2021.07 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...
CLSA-2022-1649696332 Fix of CVE: CVE-2021-3618
CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...
CLSA-2022-1649695783 Fixed CVE-2021-3618 in nginx
CVE-2021-3618: drop the connection after reaching the specified number of invalid protocol commmands...
CLSA-2022-1649695737 Fix CVE(s): CVE-2021-3618
SECURITY UPDATE: Vulnerability against application layer protocol content confusion attack - debian/patches/CVE-2021-3618.patch: Drop the connection after reaching the specified number of invalid protocol commmands - CVE-2021-3618...
