CVE-2024-5444 Bible Text <= 0.2 - Contributor+ Stored XSS

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5444 Bible Text <= 0.2 - Contributor+ Stored XSS

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress plugin Bible Text security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, WordPress is a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 CVE-2023-36617 ruby: Buffer overread vulnerability...

Critical Photon OS Security Update - PHSA-2024-5.0-0314

Updates of 'httpd', 'emacs' packages of Photon OS have been released...

dotnet: DoS in System.Text.Json

A vulnerability was found in .NET. This issue can cause a denial of service in the System.Text.Json deserialization...

dotnet: DoS in System.Text.Json

A vulnerability was found in .NET. This issue can cause a denial of service in the System.Text.Json deserialization...

CVE-2024-38517

A flaw was found in rapidjson. Processing a crafted JSON text from a stream can cause an integer overflow in the GenericReader::ParseNumber function in the include/rapidjson/reader.h file, resulting in escalation of privileges. Mitigation Do not process or parse untrusted JSON text with rapidjson...

CVE-2024-21417

Windows Text Services Framework Elevation of Privilege Vulnerability...

CVE-2024-21417

Windows Text Services Framework Elevation of Privilege Vulnerability...

HarfBuzz: Denial of Service

Background HarfBuzz is an OpenType text shaping engine. Description Multiple vulnerabilities have been discovered in HarfBuzz. Please review the CVE identifiers referenced below for details. Impact hb-ot-layout-gsubgpos.hh in HarfBuzz allows attackers to trigger On^2 growth via consecutive marks...

CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability

...

CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability

...

CVE-2024-21417

CVE-2024-21417 is a Windows Text Services Framework elevation of privilege vulnerability. The connected records confirm the affected component as Windows Text Services Framework (with CVE-2024-21417 listed as impacting Windows CoreMessaging in one entry) and describe the impact as obtaining incre...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when using .NET's JsonSerializer.DeserializeAsyncEnumerable function on untrusted input. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...

CVE-2024-39684

Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer...

CVE-2024-39684 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer...

CVE-2024-39684

Technical details about CVE-2024-39684 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security advisories.

CVE-2024-38517

CVE-2024-38517 : Tencent RapidJSON is vulnerable to a local privilege-escalation due to an integer underflow in the GenericReader::ParseNumber() function when parsing JSON text from a stream. A crafted file opened by the victim can trigger the underflow, enabling elevation of privileges. The vuln...

CVE-2024-38517 Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow

Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the intege...