5551 matches found
CVE-2023-7030
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortcode in all versions up to, and including, 1.8.5.5 due to insufficient input sanitization and output escaping on the 'tag' user supplied attribute. This makes it possible for...
CVE-2023-7030
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortcode in all versions up to, and including, 1.8.5.5 due to insufficient input sanitization and output escaping on the 'tag' user supplied attribute. This makes it possible for...
WordPress plugin Collapse-O-Matic 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mapping disclosure vulnerability in MMIO...
Moderate: Red Hat Security Advisory: harfbuzz security update
An update for harfbuzz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
GHSA-2CGQ-H8XW-2V5J CRI-O vulnerable to an arbitrary systemd property injection
Impact On CRI-O, it looks like an arbitrary systemd property can be injected via a Pod annotation: --- apiVersion: v1 kind: Pod metadata: name: poc-arbitrary-systemd-property-injection annotations: I believe that ExecStart with an arbitrary command works here too, but I haven't figured out how to...
CRI-O vulnerable to an arbitrary systemd property injection
Impact On CRI-O, it looks like an arbitrary systemd property can be injected via a Pod annotation: --- apiVersion: v1 kind: Pod metadata: name: poc-arbitrary-systemd-property-injection annotations: I believe that ExecStart with an arbitrary command works here too, but I haven't figured out how to...
CVE-2024-28180 affecting package cri-o for versions less than 1.21.7-2
CVE-2024-28180 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2021-44716 affecting package cri-o for versions less than 1.21.7-2
CVE-2021-44716 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2022-21698 affecting package cri-o for versions less than 1.21.7-2
CVE-2022-21698 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2022-29526 affecting package cri-o for versions less than 1.21.7-2
CVE-2022-29526 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2022-2995 affecting package cri-o for versions less than 1.21.7-2
CVE-2022-2995 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2023-42821 affecting package cri-o for versions less than 1.21.7-2
CVE-2023-42821 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2021-3602 affecting package cri-o for versions less than 1.21.7-2
CVE-2021-3602 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2022-27651 affecting package cri-o for versions less than 1.21.7-2
CVE-2022-27651 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2023-44487 affecting package cri-o for versions less than 1.21.7-2
CVE-2023-44487 affecting package cri-o for versions less than 1.21.7-2. A patched version of the package is available...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34043
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...