14 matches found
CVE-2026-16236 Realtyna Organic IDX plugin + WPL Real Estate <= 5.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages function combined with an insufficient authorization check on the getkeys AJAX handler a...
PT-2026-66718
The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages function combined with an insufficient authorization check on the get keys AJAX handler...
DirectCyber Evolution Controller 安全漏洞
DirectCyber Evolution Controller is an access control controller software from DirectCyber, Inc. that is used to controller physical access to facilities. A security vulnerability exists in DirectCyber Evolution Controller version 2.04.560.31.03.2024 and prior versions, which stems from an...
UBUNTU-CVE-2023-36824
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several...
libguestfs: Buffer overflow in get_keys leads to DoS
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
libguestfs: Buffer overflow in get_keys leads to DoS
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
libguestfs: Buffer overflow in get_keys leads to DoS
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
libguestfs: Buffer overflow in get_keys leads to DoS
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
CVE-2022-2211
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
DEBIAN-CVE-2022-2211
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
UBUNTU-CVE-2022-2211
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys function. This flaw leads to a denial of service, either by mistake or malicious actor...
Red Hat libguestfs 安全漏洞
Red Hat libguestfs is a set of tools for accessing and modifying virtual machine VM disk images from Red Hat. A security vulnerability exists in Red Hat libguestfs, which stems from a denial of service issue in the getkeys function when calculating the maximum number of possible key matches, and...
PT-2022-15246
Name of the Vulnerable Software and Affected Versions libguestfs affected versions not specified Description A flaw was found in the get keys function, specifically when calculating the greatest possible number of matching keys. This issue can lead to a denial of service, which could be caused by...
PT-2022-9510
Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner WordPress plugin versions prior to 3.0.4 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly sanitise and escape $ GET keys and values before...