6397 matches found
CVE-2024-36647
A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...
PT-2024-4768 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a register invariant violation in the Linux kernel's eBPF verifier. Specifically, it occurs when the verifier analyzes a branch instruction and splits t...
CVE-2024-36647
Church CRM v5.8.0 is affected by a stored XSS vulnerability where a crafted payload in the Family Name field on the Register a New Family page can execute arbitrary web scripts/HTML. The CVE-2024-36647 entry aligns with multiple sources (NVD, OSV, CVE records) describing a stored XSS with impact ...
CVE-2024-36647
A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...
CVE-2024-36647
A stored cross-site scripting XSS vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Family Name parameter under the Register a New Family page...
SUSE CVE-2024-26920
In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix registersnapshottrigger to return error code if it failed to allocate a snapshot instead of 0 success. Unless that, it will register snapshot trigger without an...
The vulnerability of the Register method in the Telerik Report Server reporting framework allows a malicious actor to access limited functions.
The vulnerability of the Register method in the Telerik Report Server reporting framework relates to bypassing authentication processes through spoofing. Exploiting this vulnerability can allow unauthorized users to gain access to limited features of the system...
Online Discussion Forum SQL Injection Vulnerability
Online Discussion Forum is a forum website. A SQL injection vulnerability exists in Online Discussion Forum version 1.0, which originates from registerme.php containing some unknown processing that leads to SQL injection via the parameter eaddress...
ROS-20240606-01
A vulnerability in QEMU's USB EHCI controller emulation is related to the lack of checks if the buffer pointer overlaps with the MMIO register when transmitting USB packets. the buffer pointer overlaps with the MMIO region when transmitting USB packets. Exploitation of the vulnerability could all...
kernel: wifi: iwlwifi: fix double-free bug
A vulnerability was found in the Linux kernel's iwlwifi driver, where the TLV PC register data being freed is not properly marked as NULL afterwards, resulting in a double-free issue. This could lead to memory corruption or crashes...
kernel: s390/ptrace: handle setting of fpc register correctly
In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control fpc register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading...
kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in smsc75xxreadreg The Linux kernel CVE team has assigned CVE-2023-52528 to this issue. Upstream advisory:...
kernel: wifi: iwlwifi: fix double-free bug
A vulnerability was found in the Linux kernel's iwlwifi driver, where the TLV PC register data being freed is not properly marked as NULL afterwards, resulting in a double-free issue. This could lead to memory corruption or crashes...
SUSE CVE-2022-4744
A double-free flaw was found in the Linux kernel's TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...
SUSE CVE-2024-0582
A memory leak flaw was found in the Linux kernel's iouring functionality in how a user registers a buffer ring with IORINGREGISTERPBUFRING, mmap it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system...
CVE-2023-40673
: Improper Control of Interaction Frequency vulnerability in cartpauj Cartpauj Register Captcha allows Functionality Misuse.This issue affects Cartpauj Register Captcha: from n/a through 1.0.02...
CVE-2023-40673 WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability
: Improper Control of Interaction Frequency vulnerability in cartpauj Cartpauj Register Captcha allows Functionality Misuse.This issue affects Cartpauj Register Captcha: from n/a through 1.0.02...
CVE-2023-43544
Memory corruption when IPC callback handle is used after it has been released during register callback by another thread...