5765 matches found
PT-2021-26346
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations: For Linux Kernel...
PT-2021-26349
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility ha...
PT-2021-30282
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...
PT-2021-30286
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This issue was introduced in version v5.4 and is fixed in version...
PT-2021-26315
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.76 Description: A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...
PT-2021-30305
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue concerns the stack handling in the idle kvm start guest function. It was introduced in version v5.2 and fixed in version v5.10.76. The actual impact and attack plausibility have not...
PT-2021-26291
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.156 Description: A use-after-free UAF issue exists in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not yet been proven...
PT-2021-26354
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. The actual impact and attack plausibility have not bee...
CVE-2020-23055
ANCOM WLAN Controller Wireless Series & Hotspot WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the /authen/start/ module via the userid and password parameters...
CVE-2021-0706
In startListening of PluginManagerImpl.java, there is a possible way to disable arbitrary app components due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
CVE-2021-38481
The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...
Spoofing
The scheduler service running on a specific TCP port enables the user to start and stop jobs. There is no sanitation of the supplied JOB ID provided to the function. An attacker may send a malicious payload that can enable the user to execute another SQL expression by sending a specific string...
PT-2021-10830
Name of the Vulnerable Software and Affected Versions ANCOM WLAN Controller Wireless Series & Hotspot versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located in the /authen/start/ module and can be exploited via th...
CVE-2020-23055: Improper Neutralization of Input During Web Page Generation
ANCOM WLAN Controller Wireless Series & Hotspot WLC-1000 & WLC-4006 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the /authen/start/ module via the userid and password parameters...
ANCOM WLAN Controller WLC-1000 Cross-site Scripting Vulnerability
The ANCOM WLAN Controller WLC-1000 is an industrial control system. A security vulnerability exists in the ANCOM WLAN Controller WLC-1000 and WLC-4006 that allows an attacker to include multiple cross-site scripting vulnerabilities in the "/authen/start/" module via the user ID and password...
CVE-2021-39354
The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $startdate and $enddate parameters found in the /includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2...
WordPress cross-site scripting vulnerabilities
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Easy Digital Downloads, which ca...
PT-2021-22560
Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads WordPress plugin versions up to and including 2.11.2 Description: The issue allows attackers to inject arbitrary web scripts via the start date and end date parameters found in the...
October 21, 2021âKB5006746 (OS Build 22000.282) Preview
None None...
OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated...