Lucene search
K

4004 matches found

OSV
OSV
added 2024/07/16 12:15 p.m.2 views

DEBIAN-CVE-2022-48793

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

5.5CVSS5.3AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2024/07/16 12:15 p.m.25 views

CVE-2022-48793

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

5.5CVSS0.00018EPSS
Exploits0References3
OSV
OSV
added 2024/07/16 12:15 p.m.0 views

UBUNTU-CVE-2022-48793

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/07/16 11:43 a.m.19 views

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

6.8AI score0.00018EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/07/16 11:43 a.m.27 views

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

0.00018EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/07/16 11:43 a.m.18 views

CVE-2022-48793

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

5.5CVSS5.3AI score0.00018EPSS
Exploits0
CVE
CVE
added 2024/07/16 11:43 a.m.86 views

CVE-2022-48793

CVE-2022-48793 affects the Linux kernel KVM/x86 nested migration path. The root cause is a NULL dereference caused by calling nested_svm_load_cr3 before Nested Page Tables (NPT) are enabled, preventing guest memory access and breaking mmu walk initialization. Red Hat and vendor advisories (RHSA-2...

5.5CVSS6.9AI score0.00018EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/07/16 11:43 a.m.23 views

CVE-2022-48793 KVM: x86: nSVM: fix potential NULL derefernce on nested migration

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nestedsvmloadcr3 to be too early, before the NPT is enabled, which is very...

5.5CVSS5.9AI score0.00018EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2024/07/13 2:47 a.m.1 views

SUSE CVE-2024-6611

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

4.3CVSS6.2AI score0.0059EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.15 views

RHEL 5 : python (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python: Nested zip file Zip bomb vulnerability in Lib/zipfile.py CVE-2019-9674 Note that Nessus has not tested for...

5.3CVSS7AI score0.01416EPSS
Exploits0References3
OSV
OSV
added 2024/07/10 12:0 a.m.0 views

UBUNTU-CVE-2024-6611

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

9.8CVSS7.2AI score0.0059EPSS
Exploits0References6
AlpineLinux
AlpineLinux
added 2024/07/09 3:15 p.m.23 views

CVE-2024-6611

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

9.8CVSS8.7AI score0.0059EPSS
Exploits0
Cvelist
Cvelist
added 2024/07/09 2:25 p.m.20 views

CVE-2024-6611 Incorrect handling of SameSite cookies

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

0.0059EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2024/07/09 2:25 p.m.18 views

CVE-2024-6611

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

9.8CVSS7.6AI score0.0059EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/07/09 2:25 p.m.14 views

CVE-2024-6611 Incorrect handling of SameSite cookies

A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies. This vulnerability affects Firefox 128 and Thunderbird 128...

8AI score0.0059EPSS
Exploits0References3
OSV
OSV
added 2024/07/04 12:15 p.m.3 views

CVE-2024-5943

The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7. This is due to missing or incorrect nonce validation on the 'settingsPage' function and missing santization of the 'tab' parameter. This makes it possible for...

8.8CVSS5.7AI score
Exploits0References4
CVE
CVE
added 2024/07/04 11:34 a.m.77 views

CVE-2024-5943

CVE-2024-5943 — The Nested Pages WordPress plugin is vulnerable to Cross-Site Request Forgery in all versions up to 3.2.7. The issue arises from missing or incorrect nonce validation in the settingsPage function and missing sanitization of the tab parameter. This allows unauthenticated attackers ...

8.8CVSS8.3AI score0.00389EPSS
Exploits0References4Affected Software1
Patchstack
Patchstack
added 2024/07/04 12:48 a.m.3 views

WordPress Nested Pages plugin <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion vulnerability

Cross-Site Request Forgery to Local File Inclusion vulnerability discovered by Bassem Essam in WordPress Plugin Nested Pages versions = 3.2.7...

8.8CVSS7AI score0.00389EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/04 12:0 a.m.3 views

PT-2024-37258 · WordPress · Nested Pages

Name of the Vulnerable Software and Affected Versions: Nested Pages plugin for WordPress versions up to, and including, 3.2.7 Description: The issue is due to missing or incorrect nonce validation on the settingsPage function and missing sanitization of the tab parameter. This makes it possible f...

8.8CVSS6.8AI score0.00389EPSS
Exploits0References14
CNNVD
CNNVD
added 2024/07/04 12:0 a.m.4 views

WordPress plugin Nested Pages security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.8AI score0.00389EPSS
Exploits0References5
Rows per page
Query Builder