PT-2022-12580 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.5 MediaWiki versions 1.36.x prior to 1.36.3 MediaWiki versions 1.37.x prior to 1.37.1 Description: An issue was discovered in the WikibaseMediaInfo component, which is vulnerable to XSS via the caption fields...

PT-2022-2254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System CIFS, specifically due to an incorrect return from the memdup user function...

CVE-2022-20015

In kdcamerahw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966...

PT-2021-27299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to the initialization of ssif info-client in the IPMI SSIF. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.89 Description The issue is related to the initialization of ssif info-client in the IPMI SSIF. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-27263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.169 Description The issue is related to the initialization of ssif info-client in the IPMI SSIF. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

CVE-2021-24988

The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprssdismissaddonnotice AJAX action missing authorisation and CSRF checks, allowing any authenticated...

CVE-2021-24988

The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprssdismissaddonnotice AJAX action missing authorisation and CSRF checks, allowing any authenticated...

CVE-2021-24988

The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprssdismissaddonnotice AJAX action missing authorisation and CSRF checks, allowing any authenticated...

CVE-2021-24988

The CVE affects the WordPress WP RSS Aggregator plugin, versions prior to 4.19.3. Root cause: unsanitised/uncleaned data output in the System Info admin dashboard due to the wprss_dismiss_addon_notice AJAX action missing authorisation and CSRF checks. Impact: stored XSS where an authenticated use...

WP Cookie User Info < 1.0.9 - Admin+ SQL Injection

The plugin does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection...

CVE-2021-24988: Improper Neutralization of Input During Web Page Generation

The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprssdismissaddonnotice AJAX action missing authorisation and CSRF checks, allowing any authenticated...

info-mv.de Cross Site Scripting vulnerability OBB-2311287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Information disclosure

In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small...

CVE-2021-45473

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

CVE-2021-45473

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

CVE-2021-45473

CVE-2021-45473 affects MediaWiki up to version 1.37 with Wikibase item descriptions allowing XSS, triggered when visiting an action=info page (page-information sidebar). Multiple connected sources (OSV, CNVD, Nessus/NASL notes) corroborate that the flaw stems from insufficient escaping/validation...

CVE-2021-45473: Improper Neutralization of Input During Web Page Generation

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL aka a page-information sidebar...

QEMU virgl_cmd_get_capset_info() Information Disclosure

The vulnerability of the virglcmdgetcapsetinfo function in the contrib/vhost-user-gpu/virgl.c component of the QEMU hardware emulation software is related to the disclosure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...

PT-2021-26996

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.5 Description A memory leak issue was discovered in the get file stream info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.1...