CVE-2019-17592

The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The isInt function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option...

CVE-2017-1000112

An exploitable memory corruption flaw was found in the Linux kernel. The append path can be erroneously switched from UFO to non-UFO in ipufoappenddata when building an UFO packet with MSGMORE option. If unprivileged user namespaces are available, this flaw can be exploited to gain root privilege...

CVE-2018-12539

In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on...

CVE-2015-9477

The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...

CVE-2015-9474

The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...

CVE-2015-9475

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

CVE-2015-9476

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates...

Input validation

The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...

Input validation

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

Input validation

The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...

Input validation

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates...

CVE-2015-9477

The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates...

CVE-2015-9476

The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates...

CVE-2015-9476

CVE-2015-9476 involves WordPress Teardrop theme (v1.8.1) with insufficient restrictions on option updates. The vulnerability allows privilege escalation by any authenticated user who can trigger option changes (e.g., altering default_role, registration state), enabling command/code execution on t...

CVE-2015-9475

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

CVE-2015-9475

The CVE-2015-9475 entry corresponds to the Pont theme 1.5 for WordPress, which has insufficient restrictions on option updates. Connected sources describe a privilege-escalation vulnerability where any authenticated user can trigger option changes (e.g., user roles, registration state) via expose...

CVE-2015-9474

The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...

CVE-2015-9474

The CVE-2015-9474 issue affects the WordPress Simpolio theme (version 1.3.2), where insufficient restrictions on option updates enable privilege escalation. The public sets show that an attacker with any authenticated user can trigger the vulnerability by manipulating theme options (e.g., default...

PRODSECBUG-2425: Cross-Site Scripting via Signifyd Guarantee Option Translation Override

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

High severity vulnerability that affects PeterO.Cbor

Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denial of service can happen if those reference...