11817 matches found
CVE-2024-23355
Memory corruption when keymaster operation imports a shared key...
CVE-2024-4347
The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the...
The vulnerability of the mm/mremap.c module in Android operating systems allows attackers to increase their privileges.
The vulnerability of the mm/mremap.c module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2024-13504
The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dfxp File uploads in all versions up to, and including, 1.7.42 due to insufficient input sanitization and output escaping. This makes it possible for...
Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service
Summary Numerous fixes to the Linux kernel for reported issues related to various security vulnerabilities such as demnial of service, unauthorized access, or leakage of sensitive data. Vulnerability Details CVEID:CVE-2020-26555 DESCRIPTION: Bluetooth Core and Mesh Specifications could allow a...
Malicious code in proton-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-862 Malicious code in proton-shared (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @infoserver/gov-shared-connections (npm)
--- -= Per source details. Do not edit below this line.=-...
The vulnerability in the Firefox web browser and the Thunderbird email client arises from the simultaneous execution using a shared resource with incorrect synchronization, allowing an attacker to cause a service failure.
The vulnerability in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution of processes using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2025-22994
creationtimestamp| type| source ---|---|--- 2025-01-31 16:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fimmohi2r 2025-01-31 19:34:23+00:00| seen| https://t.me/cvedetector/16965 2025-01-31 19:35:24+00:00| seen|...
WordPress plugin Shared Files 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
WordPress Shared Files plugin <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload vulnerability
Limited Unauthenticated Stored Cross-Site Scripting via File Upload vulnerability discovered by Tim Coen in WordPress Plugin Shared Files versions = 1.7.42...
The Basics of AWS Infrastructure Security
Discover key strategies to strengthen your AWS security posture, from applying protection at all layers to understanding shared responsibility in the cloud...
The vulnerability of the Firebird software components “Population Cancer Registry” and “Hospital Cancer Registry” allows attackers to disclose protected information.
The vulnerability of the Firebird software components “Population Cancer Registry” and “Hospital Cancer Registry” is related to the shared storage of passwords with decryption tools. Exploiting this vulnerability can allow an attacker to disclose the protected information...
LoongArch: Don't crash in stack_top() for tasks without vDSO
...
The vulnerabilities in the mm/madvise.c and mm/msync.c components of the Linux kernel allow a hacker to trigger a service failure.
The vulnerability in the mm/madvise.c and mm/msync.c components of the Linux kernel involves the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the hfsplus_file_truncate() function in the fs/hfsplus/extents.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the hfsplusfiletruncate function in the fs/hfsplus/extents.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the drivers/gpu/drm/vmwgfx cores of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the drivers/gpu/drm/vmwgfx cores in the Linux operating system is related to the simultaneous execution using shared resources with improper synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...
[SECURITY] Fedora 41 Update: glibc-2.40-21.fc41
The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...
CVE-2024-26317
In illumos-gate (Illumos) versioned sources from 2024-02-15, a bug in the elliptic curve point addition implementation that uses mixed Jacobian-affine coordinates can produce POINT_AT_INFINITY when a valid result is expected. This flaw enables a man-in-the-middle to interfere with a connection, c...