7597 matches found
@bookshop/browser (3.11.0-rc.0), @bookshop/generate (3.11.0-rc.0) +24 more potentially affected by CVE-2024-56159 via astro (>=4.0.3, <=4.16.17)
astro NPM version =4.0.3, =0.40.5, =0.38.0, =0.38.0, =2.8.4, =0.2.0, =0.0.0-dev-20231211183354, =0.0.3, =0.0.3, =0.0.5, =0.0.1, =1.0.2, =1.0.9 - @thewebforge/astro-og-images 3.0.0 and more Source cves: CVE-2024-56159 Source advisory: OSV:GHSA-49W6-73CW-CHJR...
CVE-2024-55601
Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...
Hugo 跨站脚本漏洞
Hugo is a Go-based framework for rapid static site generation from the Gohugoio community. A cross-site scripting vulnerability exists in Hugo versions prior to 0.123.0 through 0.139.4, which stems from improperly escaping HTML attributes in certain Markdown in internal rendering hooks...
[SECURITY] Fedora 40 Update: webkitgtk-2.46.4-1.fc40
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...
Fedora: Security Advisory (FEDORA-2024-4014fa4ecc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 40 : webkitgtk (2024-4014fa4ecc)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4014fa4ecc advisory. Improve memory consumption and performance of Canvas getImageData. Fix preserve-3D intersection rendering. Fix video dimensions since GStreamer...
The vulnerability of DRM/VMWGFX components in Linux operating systems allows a perpetrator to trigger a service failure.
The vulnerability of DRM/VMWGFX components in Linux operating systems is related to the operation of writing data beyond the buffer in memory within the vmweventfenceactioncreate function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of DRM/MSM/A6XX components in Linux kernel, which allow a hacker to trigger a service failure
The vulnerability of DRM/MSM/A6XX components in the Linux operating system is related to reading data outside of the allowed range. Exploiting this vulnerability can allow a hacker to cause service failures...
CVE-2024-11479
A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket...
CVE-2024-11479
CVE-2024-11479 concerns Issuetrak 17.1. An authenticated user can inject HTML into ticket comments, which is then rendered in emails sent to all users on that ticket. The affected component is the comment handling in tickets; the root cause is HTML injection in comments. Publicly stated impact is...
The vulnerability of DRM/QXL components in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of DRM/QXL components in Linux operating systems is related to improper locking of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...
The vulnerability of the Blink rendering module in Microsoft Edge and Google Chrome browsers allows attackers to compromise the integrity of protected information.
The vulnerability of the Blink rendering module in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially...
The vulnerability of components related to DRM/AMDKFD in Linux kernel components, which allows a hacker to trigger a service failure.
The vulnerability of the DRM/amdkfd components of the Linux operating system’s kernel is related to errors in reading beyond the boundary in the svmrangeapply attrs function. Exploiting this vulnerability can allow a perpetrator to cause service failures...
The vulnerability of components related to DRM/AMDKFD in Linux kernel allows attackers to increase their privileges within the system.
The vulnerability of DRM/AMDKFD components in Linux kernel relates to memory management errors that occur after memory is freed in the svmrangevramnodefree function. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of DRM/AMD components in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of DRM/AMDKFD components in Linux kernel relates to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause service failures...
[SECURITY] Fedora 41 Update: webkitgtk-2.46.4-1.fc41
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...