WordPress Gallery from files plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.Gallery from files is a plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Gallery from...

The vulnerability in the implementation of the LoadFromFile, LoadFromString, or LoadFromStream functions of the PDF Quick PDF Library allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the LoadFromFile, LoadFromString, or LoadFromStream functions in the PDF handling library of the Quick PDF Library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a...

Working from home? You’re probably being spied on

One year ago, as countless employees settled into new routines for working from home WFH, a Reddit user shared a video online of a strange contraption: A wire coat hanger bent out of shape, one side gripping an external USB mouse, the other side latched onto an oscillating fan. As the fan swished...

CVE-2021-24349: Improper Neutralization of Input During Web Page Generation

This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lac...

PT-2021-15885 · WordPress · This Gallery From Files

Name of the Vulnerable Software and Affected Versions: This Gallery from files WordPress plugin versions 1.6.0 and earlier Description: The issue arises from the improper sanitization of filenames before being output in an error message when they have an invalid extension, leading to a reflected...

CVE-2020-23321

There is a heap-buffer-overflow at lit-strings.c:431 in litreadcodeunitfromutf8 in JerryScript 2.2.0...

DEBIAN-CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

CVE-2021-34555: NULL Pointer Dereference

OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a multi-value From header field...

PT-2021-4268

Name of the Vulnerable Software and Affected Versions OpenDMARC versions 1.4.1 through 1.4.1.1 Description The issue is related to a denial of service caused by a NULL pointer dereference and application crash. This can be triggered by remote attackers via a multi-value From header field. The...

PT-2021-28299

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state with the following function calls: frame get...

OpenDMARC 代码问题漏洞

OpenDMARC is an open source implementation of the DMARC Domain-based Message Authentication, Reporting and Conformance specification from The Trusted Domain project. OpenDMARC suffers from a security vulnerability that stems from an unknown feature in the component header field handler. An attack...

PT-2024-11235 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to state corruption in the fpu restore sig function. The non-compacted slowpath uses copy from user and copies the entire user buffer into the kernel buffer,...