7893 matches found
CVE-2024-5170 Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-5170 Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget
The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Exploit for CVE-2024-32651
CVE-2024-32651 changedetection --port --ip --notification...
RHSA-2018:3249 Red Hat Security Advisory: setup security and bug fix update
Bulletin has no description...
RHSA-2019:1206 Red Hat Security Advisory: rhvm-setup-plugins security update
Bulletin has no description...
RHSA-2019:1205 Red Hat Security Advisory: rhvm-setup-plugins security update
Bulletin has no description...
CVE-2024-6617 NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles
The NinjaTeam Header Footer Custom Code WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...
CVE-2024-6887 Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high privilege users such as editor and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallow...
UBUNTU-CVE-2024-45011
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
CVE-2024-45011 char: xillybus: Check USB endpoints when probing device
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
CVE-2024-45011 char: xillybus: Check USB endpoints when probing device
In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN...
drm/amd/display: Fix division by zero in setup_dsc_config
...
media: tc358743: register v4l2 async device only after successful setup
...
CVE-2024-7716
The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-7716
The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-43457
Windows Setup and Deployment Elevation of Privilege Vulnerability...
CVE-2024-43457
Windows Setup and Deployment Elevation of Privilege Vulnerability...
CVE-2024-43457 Windows Setup and Deployment Elevation of Privilege Vulnerability
...
CVE-2024-43457 Windows Setup and Deployment Elevation of Privilege Vulnerability
...
CVE-2024-43457
CVE-2024-43457 is a Windows Setup and Deployment Elevation of Privilege vulnerability. The advisory indicates a local elevation exploit affecting Windows, with CVSSv3.1 vector: Local, Privileges Required Low, User Interaction None, Confidentiality/Integrity/Availability High. Public exploits exis...