5523 matches found
CVE-2024-21864
Improper neutralization in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access...
CVE-2024-21864
Improper neutralization in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access...
CVE-2024-5023 Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...
CVE-2024-5023
CVE-2024-5023 affects Netflix ConsoleMe prior to 1.4.0. Root cause: improper neutralization of special elements used in a command within Template resources flow, enabling command execution via crafted inputs. Documentation indicates authenticated users can achieve limited remote code execution co...
CVE-2024-1417
WatchGuard (WatchGuard) AuthPoint Password Manager for macOS is affected by CVE-2024-1417, a local Command Injection vulnerability caused by improper neutralization of special elements. The issue allows a user with local access to execute code within the AuthPoint Password Manager application, af...
CVE-2024-34760
CVE-2024-34760: Stored XSS in WPBlockart Magazine Blocks due to improper neutralization of input during web page generation. Affected: Magazine Blocks versions up to 1.3.6 (no details on fixed version or patch in the provided documents). The Connected Red Hat entry and Wordfence report confirm th...
CVE-2024-30314 Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does require user interaction...
Intel Power Gadget 安全漏洞
Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget, which stems from an improper neutralization issue. It could allow an authenticated user to escalate privileges via...
Intel Power Gadget 安全漏洞
Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget, which stems from an improper neutralization issue. It could allow an authenticated user to escalate privileges via...
PT-2024-13369 · Intel · Intel Power Gadget
Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper neutralization in the IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...
PT-2024-13057
Name of the Vulnerable Software and Affected Versions IntelR Power Gadget software for Windows affected versions not specified Description The issue is related to improper neutralization in the IntelR Power Gadget software for Windows, which may allow an authenticated user to potentially enable...
PT-2024-25991
Name of the Vulnerable Software and Affected Versions DethemeKit For Elementor versions 2.1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker c...
PT-2024-26201
Name of the Vulnerable Software and Affected Versions Webvitaly iFrame versions prior to 5.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For versions...
PT-2024-26168
Name of the Vulnerable Software and Affected Versions WPBlockart Magazine Blocks versions 1.3.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be exploited b...
Intel Arc 和 Iris Xe 安全漏洞
Intel Iris Xe and Intel Arc are both products of Intel Corporation, the United States of America.Intel Iris Xe is a display chip that is integrated inside a central processor.Intel Arc is a family of graphics cards. A security vulnerability previously existed in Intel Arc and Iris Xe version...
CVE-2024-21864: Improper Neutralization of Invalid Characters in Identifiers in Web Pages
Improper neutralization in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent network access...
CVE-2024-34436
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.8...
CVE-2024-34430
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rashed Latif TT Custom Post Type Creator allows Stored XSS.This issue affects TT Custom Post Type Creator: from n/a through 1.0...
CVE-2024-34425
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phil Baylog QuickieBar allows Stored XSS.This issue affects QuickieBar: from n/a through 1.8.4...
CVE-2024-34423
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...