GSD-2022-1000849 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...

GSD-2022-1000727 xhci: Prevent futile URB re-submissions due to incorrect return value.

xhci: Prevent futile URB re-submissions due to incorrect return value. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29156

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29123

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.11 through 5.10.102 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29220

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29069

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29001

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29181

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

PT-2022-29201

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description The issue is related to the xhci component, where futile URB re-submissions occur due to an incorrect return value. The actual impact and attack plausibility have not yet been proven...

CVE-2022-0248

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the maliciou...

Cross site scripting

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the maliciou...

CVE-2022-0248

The CVE-2022-0248 affects the WordPress plugin Contact Form Submissions prior to v1.7.3. The root cause is failure to sanitize/escape additional fields in contact form submissions, allowing unauthenticated attackers to trigger Cross-Site Scripting (XSS) when admins view a malicious submission. Pu...

PT-2022-13066

Name of the Vulnerable Software and Affected Versions Contact Form Submissions WordPress plugin versions prior to 1.7.3 Description The issue allows an unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing a malicious submission, due to the plugin not sanitizing...

WordPress plugin Contact Form Submissions 跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of the WordPress Contact Form Submissions plugin prior to 1.7.3, which stems from...

CVE-2022-0248: Improper Neutralization of Input During Web Page Generation

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the maliciou...

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress...

WordPress Contact Form Submissions plugin <= 1.7.2 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Yoru Oni in WordPress Contact Form Submissions plugin versions = 1.7.2. Solution Update the WordPress Contact Form Submissions plugin to the latest available version at least 1.7.3...

UBUNTU-CVE-2021-41865

HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6...

CVE-2021-34647

The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulkexportsubmissions function found in the /includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to export all Ninja Forms submissions data via t...

CVE-2021-34647

The Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulkexportsubmissions function found in the /includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to export all Ninja Forms submissions data via t...