9173 matches found
PT-2024-41560
Уязвимость функции tracing map insert модуля kernel/trace/tracing map.c поддержки трассировки ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)
Software CBX Map for Google Map & OpenStreetMap Type Plugin Vulnerable versions = 1.1.11 Fixed in 1.1.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22297 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6cbb40aedd6b Credits Ngô Thiên An...
CVE-2023-52104
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2024-8362
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free error in the of parse phandle with args map function. This function has an inner loop that iterates through map entries and calls of node putnew to...
OSMMapPMRGeneric Privilege Escalation
The vulnerability of the OSMMapPMRGeneric function pmros.c in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
CVE-2022-36677
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
CVE-2022-36677
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
CVE-2022-36677
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
PT-2024-11600 · Obsidian · Obsidian Mind Map
Name of the Vulnerable Software and Affected Versions: Obsidian Mind Map version 1.1.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document. Recommendations: For Obsidian Mind Map version 1.1.0, update to a version that contain...
CVE-2022-36677
The Obsidian Mind Map software, specifically version v1.1.0 , is vulnerable to arbitrary code execution. The root cause is the processing of a crafted payload injected into an uploaded document . The vulnerability is classified as Improper Neutralization of Input During Web Page Generation (CWE-7...
CVE-2022-36677: Improper Neutralization of Input During Web Page Generation
Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded document...
CVE-2023-6524
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor...
CVE-2023-6524: Improper Neutralization of Input During Web Page Generation
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor...
WordPress Ideal Interactive Map Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Software Ideal Interactive Map Type Plugin Vulnerable versions = 1.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52189 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a837bcedc198 Credits Ngô Thiên An ancorn from VNPT-VCI...
CVE-2023-33120
Memory corruption in Audio when memory map command is executed consecutively in ADSP...
Memory corruption
Memory corruption in Audio when memory map command is executed consecutively in ADSP...
CVE-2023-43514 Use After Free in DSP Services
Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...
CVE-2023-43514 Use After Free in DSP Services
Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP...
CVE-2023-33120
CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...