2651 matches found
AZL-51114 CVE-2024-47710 affecting package kernel for versions less than 5.15.173.1-1
In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...
AZL-51213 CVE-2024-47710 affecting package kernel for versions less than 6.6.56.1-5
In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...
UBUNTU-CVE-2024-47710
In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfree Several syzbot soft lockup reports all have in common sockhashfree If a map with a large number of buckets is destroyed, we need to yield the cpu when needed...
CVE-2024-43047
Memory corruption while maintaining memory maps of HLOS memory...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...
CVE-2024-43047 Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory...
CVE-2024-43047
CVE-2024-43047 is a memory corruption (use-after-free) issue in Qualcomm DSP driver ADSPRPC that handles DMA-mapped memory between the host OS and DSP. Public reports describe multiple kernel panics and memory-safety failures tied to fastrpc_mmap and related structures (fastrpc_mmap, fastrpc_file...
Cross Site Scripting(XSS)
LibreNMS is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the lack of proper validation and sanitization of user-uploaded SVG files, allowing users with the "admin" role to upload these files as backgrounds for custom maps without sufficient security checks, which enables...
Cross-site Scripting (XSS)
Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Set Background option in the Manage Custom Maps section, by uploading a malicious SV...
CVE-2024-9028
The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-9028 WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode
The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-9028
CVE-2024-9028 : WP GPX Maps for WordPress is affected by a Stored XSS via the sgpx shortcode in all versions up to 1.7.08. The issue stems from insufficient input sanitization and output escaping of user-supplied attributes, allowing authenticated attackers (Contributor+ with access) to inject sc...
WordPress plugin WP GPX Maps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
UBUNTU-CVE-2024-46710
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Prevent unmapping active read buffers The kms paths keep a persistent map active to read and compare the cursor buffer. These maps can race with each other in simple scenario where: a buffer "a" mapped for update b...
PT-2024-33708
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A vulnerability has been found in the Linux kernel where specific helpers with ARG PTR TO LONG,INT as arguments can write into read-only BPF maps from the BPF program side. This occurs becaus...
WordPress amCharts: Charts and Maps plugin <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery vulnerability
Reflected Cross-Site Scripting via Cross-Site Request Forgery vulnerability discovered by Krzysztof Zając in WordPress Plugin amCharts: Charts and Maps versions = 1.4.4...
WordPress amCharts: Charts and Maps Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
Software amCharts: Charts and Maps Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8622 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 73021204c003 Credits Krzyszto...
WordPress plugin amCharts: Charts and Maps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...