CVE-2020-23208

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test" field under the "Start or continue campaign" module...

PT-2021-10858 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phplist version 3.5.3 Description: A stored cross site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Send test field under the Start or continue campaign module...

PhpList 跨站脚本漏洞

phpList is an open source newsletter and email marketing software from phpList UK. A stored cross-site scripting vulnerability exists in phplist version 3.5.3. The vulnerability can be exploited to execute arbitrary web script or HTML via the "Send Test" field under the "Start or Continue Campaig...

CVE-2020-23208: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in phplist 3.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Send test" field under the "Start or continue campaign" module...

CVE-2021-21676

Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address...

CVE-2021-21676: Missing Authorization

Jenkins requests-plugin Plugin 2.2.7 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to send test emails to an attacker-specified email address...

CVE-2021-0548

In rwi93sendtolower of rwi93.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

UVI-2021-1000163 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.35 by commit...

GSD-2021-1000315 nvmet-rdma: Fix NULL deref when SEND is completed with error

nvmet-rdma: Fix NULL deref when SEND is completed with error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000090 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.2 by commit...

GSD-2021-1000125 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.19 by commit...

UVI-2021-1000090 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.2 by commit...

UVI-2021-1000125 net: qrtr: Avoid potential use after free in MHI send

net: qrtr: Avoid potential use after free in MHI send This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.19 by commit...

PT-2021-24940

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.233 Description: A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-24598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.19 Description The issue concerns a potential use after free in MHI send, which may have security implications. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-28934

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.233 Description A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2021-24890

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-24786

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.9 through v5.10.37 Description A potential security issue exists due to a NULL dereference when a SEND operation is completed with an error in nvmet-rdma. The actual impact and likelihood of an attack have not been...

PT-2021-24952

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.269 Description: A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2021-24814

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A use after free issue was discovered in the emac mac tx buf send function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...