11775 matches found
CVE-2024-2010
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in TE Informatics V5 allows Reflected XSS.This issue affects V5: before 6.2...
WordPress Tag Groups plugin <= 2.0.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peng Zhou Patchstack Alliance in WordPress Plugin WordPress Tag Cloud Plugin – Tag Groups versions = 2.0.3...
WordPress WordPress Tag Cloud Plugin – Tag Groups Plugin <= 2.0.3 is vulnerable to Sensitive Data Exposure
Software WordPress Tag Cloud Plugin – Tag Groups Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-43237 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d69c3848e4ee Credits Pen...
nvme: fix reconnection fail due to reserved tag allocation
...
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input this can be used as a vector for a denial-of-service attack.
...
BIT-GOLANG-2024-34158 Stack exhaustion in Parse in go/build/constraint
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
[SECURITY] Fedora 40 Update: expat-2.6.3-1.fc40
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
XML Entity Expansion (XXE)
The HL7 FHIR Core is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of XSLT transforms in various components, allowing a malicious XML file with a DTD tag to expose host system data...
PT-2024-28961
Name of the Vulnerable Software and Affected Versions Joplin affected versions not specified Description The issue arises from Joplin's failure to consider that "" followed by a non-letter character will not be considered HTML. This oversight allows for a potential XSS attack by injecting an...
CVE-2024-34158
A flaw was found in the go/build/constraint package of the Golang standard library. Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. Mitigation Mitigation for this issue is either not available or the currently available optio...
CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
DEBIAN-CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-79078 CVE-2024-34158 affecting package golang 1.25.7-1
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-48929 CVE-2024-34158 affecting package golang for versions less than 1.18.8-6
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
ALPINE-CVE-2024-34158
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
AZL-98805 CVE-2024-34158 affecting package golang 1.27.1-1
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion...
CVE-2024-34158
The golang compiler's go/build/constraint package is vulnerable to a panic due to stack exhaustion . This occurs when the Parse function processes a // +build build tag line containing deeply nested expressions . This issue affects various distributions including AlmaLinux 9.2 , Photon OS 5.0 , a...
