7909 matches found
The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.
The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...
The vulnerability of the `fuse_kern_mount` function in the `libfuse-lite` library, implemented in the NTFS file system, allows a malicious actor to execute arbitrary code with elevated privileges.
The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...
The vulnerability of the Yandex Browser Lite browser for Android allows a hacker to replace the value of the URL bar with a spoofing IDN.
The vulnerability of the Yandex Browser Lite browser for Android is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to remotely replace values in the address bar using IDN spoofing techniques...
The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to replace the value of the URL address line.
The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to remotely replace the value of the address bar...
The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to trigger a service denial.
The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of the Yandex Browser Lite browser for Android, related to bypassing authentication through spoofing, allows a perpetrator to replace the value of the URL address line.
The vulnerability of the Yandex Browser Lite browser for Android relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to remotely replace the value of the address bar...
Debian DLA-3055-1 : ntfs-3g - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3055 advisory. Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege...
MAL-2022-7129 Malicious code in wfs-lite-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wfs-lite-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2b68a3be380b0d140924d1d8f3e5bb5a834259149c1e0e08e8a2dcc3badabaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-30533
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-30533
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-30549
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...
CVE-2022-30533
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-30549
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...
CVE-2022-30549
Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...
CVE-2022-30533
CVE-2022-30533 affects the WordPress Modern Events Calendar Lite plugin (versions before 6.3.0). Vulnerability type: authenticated stored cross-site scripting (XSS) in the plugin, enabling an authenticated attacker to inject arbitrary scripts that run in a victim’s browser via unspecified vectors...
CVE-2022-30533
Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...
CVE-2022-29524
Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file...
CVE-2022-1604
The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
Debian DSA-5160-1 : ntfs-3g - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5160 advisory. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is that ntfsck is deprecated;...