Lucene search
+L

8173 matches found

Cvelist
Cvelist
•added 2025/01/08 6:41 a.m.•37 views

CVE-2024-12851 Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customattributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to...

6.4CVSS0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/08 6:41 a.m.•14 views

CVE-2024-12851 Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customattributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to...

6.4CVSS6.1AI score0.00302EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/08 6:41 a.m.•91 views

CVE-2024-12851

CVE-2024-12851 affects the Element Pack Elementor Addons Lite (Header Footer, Template Library, Dynamic Grid, Carousel, Remote Arrows) for WordPress. The vulnerability is a Stored Cross-Site Scripting via the custom_attributes parameter of the Cookie Consent Widget, present in all versions up to ...

6.4CVSS5.9AI score0.00302EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/08 12:00 a.m.•22 views

PT-2025-1965 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: Element Pack Elementor Addons versions up to, and including, 5.10.14 Description: The issue concerns a Stored Cross-Site Scripting vulnerability in the Element Pack Elementor Addons plugin for WordPress. This vulnerability is due to...

6.4CVSS6.2AI score0.00302EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/01/08 12:00 a.m.•28 views

WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.4CVSS7.5AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•6 views

CVE-2024-12851: Improper Neutralization of Input During Web Page Generation

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customattributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to...

6.4CVSS6AI score0.00302EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 7:49 p.m.•17 views

WordPress Element Pack Lite - Addons for Elementor plugin <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress Element Pack Lite - Addons for Elementor plugin = 5.10.14 - Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.14...

6.4CVSS5.8AI score0.00302EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2025/01/06 10:33 a.m.•149 views

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

7.5CVSS7.5AI score0.0038EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/01/06 12:00 a.m.•21 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a denial of service that may occur when the driver parses each STA profile IE and attempts to access the EXTN element ID without checking the IE length...

7.5CVSS6.4AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•24 views

PT-2025-41368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mac80211 component related to insufficient buffer length validation during hardware scanning. Specifically, the S1G capability element was not account...

7.8CVSS7.4AI score0.00154EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/12/29 12:00 a.m.•23 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to call freehtabelem after htabunlockbucket in the bpf module...

5.5CVSS6.5AI score0.00389EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/12/28 1:36 a.m.•40 views

CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

6.4CVSS6.7AI score0.0018EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2024/12/27 3:15 p.m.•22 views

AZL-54812 CVE-2024-56664 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7CVSS6.5AI score0.0018EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/27 3:15 p.m.•19 views

AZL-54779 CVE-2024-56664 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7CVSS6.7AI score0.0018EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/12/27 3:15 p.m.•14 views

DEBIAN-CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7CVSS6AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/27 3:15 p.m.•26 views

CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7.8CVSS0.0018EPSS
SaveExploits0References8
osv_azl
osv_azl
•added 2024/12/27 3:15 p.m.•15 views

AZL-55222 CVE-2024-56614 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...

7.8CVSS6.3AI score0.00255EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/27 3:15 p.m.•20 views

AZL-68315 CVE-2024-56592 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Call freehtabelem after htabunlockbucket For htab of maps, when the map is removed from the htab, it may hold the last reference of the map. bpfmapfdputptr will invoke bpfmapfreeid to free the id of the removed map element...

5.5CVSS5.6AI score0.00218EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/27 3:15 p.m.•17 views

UBUNTU-CVE-2024-56664

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix race between element replace and close Element replace with a socket different from the one stored may race with socket's close link popping & unlinking. sockmapdelete unconditionally unrefs the wrong element: /...

7.8CVSS6.6AI score0.0018EPSS
SaveExploits0References40
osv_ubuntu
osv_ubuntu
•added 2024/12/27 3:15 p.m.•17 views

UBUNTU-CVE-2024-56592

In the Linux kernel, the following vulnerability has been resolved: bpf: Call freehtabelem after htabunlockbucket For htab of maps, when the map is removed from the htab, it may hold the last reference of the map. bpfmapfdputptr will invoke bpfmapfreeid to free the id of the removed map element...

5.7CVSS6.2AI score0.00218EPSS
SaveExploits0References20
Rows per page
Query Builder