9169 matches found
CVE-2024-10494 Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW
An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and pri...
PT-2024-36974
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A race condition exists between element replacement and close in the Linux kernel's bpf and sockmap handling. This can lead to a situation where an element is unreferenced incorrectly, resultin...
NI LabVIEW security vulnerabilities
NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW that originates from improper validation of inputs to BuildFontMap in fontmgr.cpp, resulting in out-of-bounds reads that could disclose...
Linux kernel sock_map DoS
The vulnerability of the sockmap component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the function sockmapclose. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2024-37022
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel, specifically in the ceph direct read/write functionality. The bvecs array, allocated in iter get bvecs alloc, is leaked and pag...
CVE-2024-11866
The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlttabbedmap' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-11866 BMLT Tabbed Map <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlttabbedmap' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress plugin BMLT Tabbed Map has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-11866: Improper Neutralization of Input During Web Page Generation
The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlttabbedmap' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2024-17303 · WordPress · Bmlt Tabbed Map
Name of the Vulnerable Software and Affected Versions: BMLT Tabbed Map plugin for WordPress versions 1.1.8 and earlier Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'bmlt tabbed map' shortcode due to insufficient input sanitization and output escaping on...
WordPress BMLT Tabbed Map plugin <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin BMLT Tabbed Map versions = 1.1.8...
CVE-2024-53715
Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...
CVE-2024-53715 WordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...
CVE-2024-53715 WordPress Simple Travel Map plugin <= 0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...
CVE-2024-53715
CVE-2024-53715 is a CSRF to Stored XSS vulnerability in the WordPress plugin Simple Travel Map (versions
CVE-2024-53769 WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...
CVE-2024-53769
CVE-2024-53769 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin “Custom Post Type to Map Store” up to version 1.1.0. The issue is triggered by cross-site requests that lead to stored XSS and is documented with CVSS v3.1 base score 7.1 (HIGH). The available sources describe the...
CVE-2024-53769 WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...
WordPress plugin Custom Post Type to Map Store: Cross-site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
CVE-2024-53715: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Simple Travel Map simple-travel-map allows Stored XSS.This issue affects Simple Travel Map: from n/a through = 0.1...