534 matches found
Design/Logic Flaw
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges...
CVE-2020-5974
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges...
CVE-2020-5974
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges...
CVE-2020-5974
CVE-2020-5974 affects NVIDIA JetPack SDK 4.2 and 4.3, where installation scripts improperly set permissions on certain directories, enabling privilege escalation. NVIDIA’s security bulletin notes the vulnerability impacts Jetson TX1/TX2, AGX Xavier, and Nano runtimes and fixes it in JetPack SDK 4...
Security Bulletin: NVIDIA Jetson AGX Xavier, TX1, TX2, and Nano L4T - July 2020
NVIDIA has released a software security update for Jetson AGX Xavier, TX1, TX2, and Nano in the NVIDIA JetPack™ software development kit SDK. The update addresses issues that may lead to escalation of privileges. To protect your system, download and install the latest NVIDIA JetPack SDK from NVID...
PT-2020-18864
Name of the Vulnerable Software and Affected Versions NVIDIA JetPack SDK versions 4.2 through 4.3 Description The issue is related to incorrect permissions set on certain directories by the installation scripts, potentially leading to escalation of privileges. Recommendations For NVIDIA JetPack S...
CVE-2020-5974: Incorrect Default Permissions
NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges...
Google Advises Android Developers to Encrypt App Data On Device
Google today published a blog post recommending mobile app developers to encrypt data that their apps generate on the users' devices, especially when they use unprotected external storage that's prone to hijacking. Moreover, considering that there are not many reference frameworks available for t...
WordPress Jetpack plugin <=7.9 - Shortcode embedding system vulnerability
Shortcode embedding system vulnerability found by Adham Sadaqah in WordPress Jetpack plugin versions =7.9. Solution Update the WordPress Jetpack plugin to the latest available version at least 7.9.1...
WordPress Jetpack Plugin Unspecified Security Vulnerability
Description The Jetpack plugin for WordPress is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Jetpack 5.1 through 7.9 are vulnerable. Technologies Affected WordPre...
Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code
The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Vulnerability in Shortcode Embed Code security vulnerability...
WordPress Jetpack plugin cross-site scripting vulnerability (CNVD-2019-30395)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Jetpack is one of the WordPress site security management tools used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2015-9359
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
Design/Logic Flaw
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9359
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9359
The CVE-2015-9359 entry concerns the WordPress Jetpack plugin (pre-3.4.3) with a cross-site scripting (XSS) vulnerability exploitable via add_query_arg() and remove_query_arg(). Affected product: Jetpack plugin for WordPress; vulnerable component/behavior: input/output handling around query arg f...
PT-2019-7318
Name of the Vulnerable Software and Affected Versions Jetpack plugin for WordPress versions prior to 3.4.3 Description The issue concerns a problem with the Jetpack plugin for WordPress, where there is a potential for XSS Cross-Site Scripting attacks. This is due to the improper use of the add...
CVE-2015-9359: Improper Neutralization of Input During Web Page Generation
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
WordPress woocommerce-jetpack plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woocommerce-jetpack plugin is a price management plugin for e-commerce used in it. A cross-site scripting vulnerability exists in the...
