6994 matches found
WordPress plugin affiliate-toolkit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-50517
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDSK team ID-SK Toolkit idsk-toolkit allows Stored XSS.This issue affects ID-SK Toolkit: from n/a through = 1.7.2...
CVE-2024-50517 WordPress ID-SK Toolkit plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDSK team ID-SK Toolkit idsk-toolkit allows Stored XSS.This issue affects ID-SK Toolkit: from n/a through = 1.7.2...
CVE-2024-50517
CVE-2024-50517 affects WordPress ID-SK Toolkit plugin (ID-SK Toolkit) up to version 1.7.2, with a Stored XSS due to improper input neutralization during page generation. Public details across connected sources confirm the vulnerability and affected range (1.7.2 and earlier); no fix version is pro...
CVE-2024-50517 WordPress ID-SK Toolkit plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDSK team ID-SK Toolkit idsk-toolkit allows Stored XSS.This issue affects ID-SK Toolkit: from n/a through = 1.7.2...
PT-2024-34293 · Unknown · Id-Sk Toolkit
Name of the Vulnerable Software and Affected Versions: ID-SK Toolkit versions 1.7.2 and earlier Description: The issue affects the ID-SK Toolkit, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. Recommendations:...
Lunary Information Disclosure Vulnerability
lunary is lunary open source a production toolkit for LLM . lunary suffers from an information disclosure vulnerability that stems from the fact that tokens can be exposed to unauthorized actors, allowing them to perform operations on behalf of the user. An attacker could exploit this vulnerabili...
Lunary Illegal Authorization Vulnerability
lunary is lunary open source a production toolkit for LLM . An illegal authorization vulnerability exists in lunary, which stems from the presence of an incorrect authorization vulnerability that allows an unprivileged user to regenerate a private key for an item to which they do not have access...
WordPress plugin ID-SK Toolkit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
lunary email bombing vulnerability
lunary is lunary open source a production toolkit for LLM . An email bombing vulnerability exists in lunary that stems from a lack of rate limiting on the forgot password page, leading to an email bombing vulnerability. No detailed vulnerability details are provided at this time...
The vulnerability of the XML tools for Ruby REXML arises from the use of a regular expression c, which has an inefficient computational cost. This allows attackers to perform a type of “denial-of-service” attack.
The vulnerability of the XML tools for Ruby REXML relates to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to execute a type of attack known as a “denial-of-service” attack...
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apacheexporter: Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency bsc1213933 Other changes and issues fixed: Delete unpackaged debug files for RHEL Do not include source files in the package for RHEL 9...
The software used for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is vulnerable. This vulnerability allows attackers to compromise data integrity.
The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...
Lunary 信息泄露漏洞
lunary is lunary open source a production toolkit for LLM . lunary suffers from an information disclosure vulnerability that stems from the fact that tokens can be exposed to unauthorized actors, allowing them to perform operations on behalf of the user. An attacker could exploit this vulnerabili...
The software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, are vulnerable to being exploited by attackers, allowing them to alter arbitrary data.
The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the swapping of the zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a remote attacker to modify...
Fedora 41 : golang-github-nvidia-container-toolkit (2024-cd6112750e)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-cd6112750e advisory. Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch Tenable has extracted the preceding descriptio...
Fedora 41 : oath-toolkit (2024-fd57a07560)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-fd57a07560 advisory. This is new version fixing possible local privilege escalation. Tenable has extracted the preceding description block directly from the Fedora...
CVE-2024-26017
Uncontrolled search path in some IntelR Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-26017
Uncontrolled search path in some IntelR Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...