4334 matches found
sqlite: dropping of shadow tables not restricted in defensive mode
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...
Xen Denial of Service Vulnerability (CNVD-2020-07292)
Xen is an open source virtual machine monitor product. A denial of service vulnerability exists in Xen 4.12. and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via a concatenated chain of linear page tables...
The vulnerability of the Intel i915 graphics driver of Intel microcomputer software allows a hacker to alter the entries in the memory page table by manipulating MMIO (Memory-Mapped Input Output) operations, thereby increasing their privileges.
The vulnerability of the Intel i915 graphics driver in Intel microprogrammed software processors is related to the lack of security checks in the copy-to-memory instructions for bit arrays. Exploiting this vulnerability allows an attacker to alter memory page tables by manipulating MMIO...
Fedora 29 : mingw-libidn2 (2019-28d3cd20c0)
Libidn 2.3.0 released 2019-11-14 ================================== - Mitre has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 commit 241e8f48 - Update the data tables from Unicode 6.3.0 to Unicode 11.0 - Turn idn2punycodeencode, idn2punycodedecode into compa...
Amazon Linux 2 : kernel (ALAS-2019-1366)
A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure entries. A privileged guest user may use this flaw to induce a hardware Machine Check Error on the host processor,...
USN-4185-3 linux, linux-hwe, linux-oem vulnerability and regression
USN-4185-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was incomplete on 64-bit Intel x86 systems. Also, the update introduced a regression that broke KVM guests where extended page tables EPT are...
CVE-2018-12207
Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to potentially enable denial of service of the host system via local access...
The vulnerability of the bgpd daemon in the Quagga software package, which allows a hacker to induce a service failure.
The vulnerability of the bgpd daemon in the Quagga software package is related to errors in processing internal BGP translation tables as strings. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
November 5, 2019, update for Office 2016 (KB4475588)
None None...
wpDataTables <= 2.0.7 - XSS & SQL Injection
The wpDataTables – Tables & Table Charts WordPress plugin was affected by a XSS & SQL Injection security vulnerability...
CVE-2015-9401
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php editstyle id XSS...
Cross site scripting
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php editstyle id XSS...
CVE-2015-9401
The CVE-2015-9401 entry concerns the WordPress websimon-tables plugin up to version 1.3.4, which is vulnerable to an XSS flaw in wp-admin/tools.php edit_style id. Connected sources describe it as an Authenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting Websimon Tables
CVE-2015-9401
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php editstyle id XSS...
WordPress jtrt-responsive-tables plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. jtrt-responsive-tables is used in one of the HTML form editor plugin . A SQL injection vulnerability exists in the WordPress...
CVE-2017-18597
The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...
CVE-2017-18597
The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...
CVE-2017-18597
The jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php tableId parameter...
CVE-2017-18597
The CVE-2017-18597 vulnerability affects the WordPress plugin jtrt-responsive-tables (before 4.1.2). Root cause: SQL Injection in admin/class-jtrt-responsive-tables-admin.php via the tableId parameter, exploitable via crafted POST data (authenticated user context shown in PoC). Impact per sources...