17606 matches found
CVE-2024-1449
CVE-2024-1449 relates to the Master Slider – Responsive Touch Slider WordPress plugin. It is vulnerable to a Stored Cross-Site Scripting (XSS) via the ms_slide shortcode in all versions up to and including 3.9.5, caused by insufficient input sanitization and output escaping on user-supplied attri...
CVE-2021-47080
CVE-2021-47080 pertains to the Linux kernel RDMA core. Affected: Linux kernel builds where user_entry_size is supplied by the user and later used as a denominator to compute the number of entries. If the user supplies 0, a divide-by-zero triggers a kernel panic (observed in ib_uverbs_handler_UVER...
CVE-2021-47078
Concrete details available: CVE-2021-47078 affects the Linux kernel’s RDMA/rxe driver. The flaw occurs in rxe_qp_do_cleanup() when rxe_qp_from_init() has failed, causing QP fields to be garbage-collected and leading to a refcount underflow and a use-after-free condition. This can enable local exp...
CVE-2024-24904
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contains a Stored Cross-Site Scripting vulnerability. An adjacent network, high-privileged attacker could store malicious HTML/JavaScript in a trusted data store, causing the browser to execute code in the vulnerable web app context,...
CVE-2024-26280
Apache Airflow prior to 2.8.2 has an information-disclosure issue where authenticated Ops and Viewers can see audit-log contents (e.g., dag names, usernames not visible to them). Version 2.8.2+ fixes default audit-log permissions (Ops/Viewers no longer have access by default; admins retain access...
CVE-2021-47060
creationtimestamp| type| source ---|---|--- 2024-03-01 00:26:18+00:00| seen| https://t.me/ctinow/197155 2024-03-01 06:51:50+00:00| seen| https://t.me/ctinow/197325...
PUB-A-289507739
Bulletin has no description...
CVE-2024-1977
The CVE-2024-1977 entry concerns the Restaurant Solutions – Checklist plugin for WordPress (v1.0.0) with Stored XSS due to insufficient input sanitization and output escaping. The vulnerability affects multisite installations and sites where unfiltered_html is disabled. Exploitation requires auth...
CVE-2024-1435
CVE-2024-1435 affects the WordPress Tainacan Plugin,
CVE-2021-47017
A use-after-free flaw was found in ath10khtcsendbundle in ath10k in the Linux Kernel...
The vulnerability of an organization’s software for app compatibility with Rack and CORS allows a perpetrator to influence the integrity, confidentiality, and accessibility of information. This vulnerability is related to the improper use of standard permissions.
The vulnerability of an organization’s application compatibility with Rack applications and CORS Rack-cors is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to influence the integrity, confidentiality, and accessibility of information...
CVE-2021-46939
creationtimestamp| type| source ---|---|--- 2024-02-27 20:11:57+00:00| seen| https://t.me/ctinow/194815 2024-02-28 09:16:57+00:00| seen| https://t.me/ctinow/195220...
CVE-2023-52472
A null pointer dereference flaw was found in mpialloc in the crypto rsa subcomponent in the Linux kernel...
CVE-2023-48678
CVE-2023-48678 affects Acronis Cyber Protect 16 (Linux and Windows) before build 37391. Root cause: insecure folder permissions leading to sensitive information disclosure. CVSS 3.1/3.0 base metrics indicate high confidentiality impact with local, low-complexity access and low privileges required...
CVE-2024-26144
Rails is a web-application framework. Starting with version 5.2.0, there is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user's session cookie when serving blobs. It also sets Cache-Control to public. Certain...
CVE-2024-1423
Rejected reason: Accidental Request...
CVE-2024-0551
CVE-2024-0551 describes an access-control error that allows exporting the database and related data via the default user role for users with prior system access. The export mechanism uses a deterministic name, and the download is initiated by the UI before the export is deleted from the system, i...