WordPress Product Customizer Light plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Product Customizer Light versions = 1.0.0...

PT-2024-39321 · WordPress · Fonto

Name of the Vulnerable Software and Affected Versions: Fonto – Custom Web Fonts Manager plugin for WordPress versions up to, and including, 1.2.1 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This...

WordPress Fonto – Custom Web Fonts Manager plugin <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Fonto versions = 1.2.1...

drm/amd/pm: Fix negative array index read

...

drm/amdgpu: Fix the warning division or modulo by zero

...

drm/amd/display: Check index for aux_rd_interval before using

...

drm/vmwgfx: Fix prime with external buffers

...

drm/amdgpu: fix dereference after null check

...

drm/amd/display: Check denominator pbn_div before used

...

WordPress Zita Elementor Site Library plugin <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Zita Elementor Site Library versions = 1.6.3...

WordPress plugin ElementsReady Addons for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

The vulnerability of the Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CLSA-2024-1728936982 kernel: Fix of 86 CVEs

drm/amd/pm: Fix negative array index read CVE-2024-46821 - drm/amd/display: Check gpioid before used as array index CVE-2024-46818 - drm/amd/display: Check linkindex before accessing dc-links CVE-2024-46813 - drm/amd/display: Fix index may exceed array range within fpuupdatebwboundingbox...

drm/amd/amdgpu: Check tbo resource pointer

...

drm/amdgpu: the warning dereferencing obj for nbio_v7_4

...

drm/amd/display: Check msg_id before processing transcation

...

WordPress Category Icon plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Category Icon versions = 1.0.0...

PT-2024-30627 · Imagination Technologies · Imagination Technologies Graphics Ddk

Name of the Vulnerable Software and Affected Versions: Imagination Technologies Graphics DDK affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct GPU system calls, enabling the reading and writing of freed physical memory fro...

Imagination GPU DDK 安全漏洞

The Imagination GPU DDK is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU DDK 24.2 RTM1 and prior versions, which originates from software installed and run as an unprivileged user may make GPU system calls to read and write freed physical memory from the G...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...