WordPress Visitors plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Visitors is a plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Visitors plugin version 0.3 and earlier,...

PT-2024-11249 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ethtool: strset: fix message length calculation in the Linux kernel. The outer nest for ETHTOOL A STRSET STRINGSETS is not accounted for, which may result i...

Visitors WordPress plugin 跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Visitors is a plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Visitors plugin version 0.3 and earlier,...

OESA-2021-1219 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

JerryScript Post-Release Reuse Vulnerability (CNVD-2021-42988)

JerryScript is a lightweight JavaScript engine designed to run on very constrained devices such as microcontrollers. A post-release reuse vulnerability exists in ecmarefecmastring in ecma-helpers-string.c:772 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this tim...

CVE-2020-23302

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0...

Heap overflow

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0...

UBUNTU-CVE-2020-23302

There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecmastring in JerryScript 2.2.0...

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine designed to run on very constrained devices such as microcontrollers. A post-release reuse vulnerability exists in ecmarefecmastring in ecma-helpers-string.c:772 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this tim...

SUSE: Security Advisory (SUSE-SU-2020:3359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0948-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:3278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0230 Updated libpano13 packages fix a security vulnerability

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20.rc2 and earlier can lead to read and write arbitrary memory values CVE-2021-20307...

Updated libpano13 packages fix a security vulnerability

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20.rc2 and earlier can lead to read and write arbitrary memory values CVE-2021-20307...

Reflected cross-site scripting issue in Datasette

Impact The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as...

OSV-2021-841 Heap-use-after-free in AK::StringImpl::create

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34973 Crash type: Heap-use-after-free READ Crash state: AK::StringImpl::create AK::String::String AK::URLParser::parsedataurl...

Advantech iView NetworkServlet findUpdateDeviceListDetails SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet class. The issue results from the lack of proper validation o...

Advantech iView NetworkServlet getPSInventoryInfo SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech iView. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetworkServlet class. The issue results from the lack of proper validation o...

napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0 12.18.0 and < 14.4.0.

...

Security Bulletin: A format string vulnerability has been identified in IBM Spectrum Scale packaged in IBM ESS (CVE-2021-29740)

Summary A security vulnerability has been identified in all levels of IBM ESS that could allow an attacker to execute arbirtary code in IBM Spectrum Scale file system. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-29740 DESCRIPTION: IBM Spectrum Scale 5.0.0...