SUSE CVE-2021-26347

Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service...

MediaCP Media Control Panel 安全漏洞

MediaCP Media Control Panel is an innovative audio and video network control panel for streaming media service providers from MediaCP, Inc. A security vulnerability exists in MediaCP Media Control Panel that stems from a Permissive Flash cross-domain policy that could allow information disclosure...

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23464 Media CP Media Control Panel – Information Disclosure

Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...

CVE-2023-23464

CVE-2023‑23464 concerns Media CP Media Control Panel. A Permissive Flash cross‑domain policy may allow information disclosure, constituting a confidentiality risk (C/H) with no explicit exploitation status or remediation details provided in the supplied documents. Affected software/component: Med...

PT-2023-18973

Name of the Vulnerable Software and Affected Versions Media CP Media Control Panel latest version Description A Permissive Flash Cross-domain Policy in the Media CP Media Control Panel may allow information disclosure. Recommendations For the Media CP Media Control Panel latest version, consider...

GHSA-XW5J-GV2G-MJM2 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2

Version 0.7.1 of the cortex-m-rt crate introduced a regression causing the stack to NOT be eight-byte aligned prior to calling main or any other specified entrypoint, violating the stack ABI of AAPCS32, the default ABI used by all Cortex-M targets. This regression is also present in version 0.7.2...

PT-2023-35188 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2023-35346 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...

PT-2025-37906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the f2fs subsystem. A null pointer dereference in the submit merged write cond function can lead to a kernel crash when io-bio is null. This occur...

CVE-2015-10072

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address...

Cross site scripting

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address...

CVE-2015-10072 NREL api-umbrella-web Flash Message cross site scripting

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address...

CVE-2015-10072

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address...

PT-2023-10251 · Nrel · Api-Umbrella-Web

Name of the Vulnerable Software and Affected Versions: NREL api-umbrella-web version 0.7.1 Description: A problematic issue was found in the Flash Message Handler component, leading to cross site scripting. The attack can be initiated remotely. Recommendations: For NREL api-umbrella-web version...

API Umbrella Web 跨站脚本漏洞

API Umbrella Web is an open source library from National Renewable Energy Laboratory. A cross-site scripting vulnerability exists in API Umbrella Web version 0.7.1, which stems from an issue with unknown code in the component Flash Message Handler that can lead to cross-site scripting...

CVE-2015-10072: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.8.0 is able to address...

Multiple people can register the same cidNFTID

Lines of code Vulnerability details Impact Multiple people can register the same cidNFT in a way that the same "canonical on-chain identity" can be shared accross multiple real-life identities. Proof of Concept cidNFTs can be transfered as any ERC721 token. After each transfer the new owner can...

PT-2023-34904 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.271 Description: The issue is related to the f2fs component, where a panic can be avoided if the extent tree is not created. The actual impact and attack plausibility have not yet been proven...