6994 matches found
CVE-2024-51696 WordPress Content Syndication Toolkit Reader plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...
CVE-2024-51712
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...
CVE-2024-51712 WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...
CVE-2024-51712
CVE-2024-51712 : Reflected Cross-Site Scripting vulnerability in Jigoshop – Store Toolkit for WordPress, up to version 1.4.0. Connected documents confirm affected product and root cause (improper neutralization of input during web page generation). Exploitation details, affected versions beyond 1...
CVE-2024-51712 WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...
PT-2024-34859 · Visser · Visser Labs Jigoshop – Store Toolkit
Name of the Vulnerable Software and Affected Versions: Visser Labs Jigoshop – Store Toolkit versions 1.4.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...
PT-2024-34843 · Unknown · Content Syndication Toolkit Reader
Name of the Vulnerable Software and Affected Versions: Content Syndication Toolkit Reader versions 1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS, where an...
WordPress plugin Content Syndication Toolkit Reader 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
WordPress plugin SKSDEV Toolkit 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-34738 · Unknown · Sksdev Toolkit
Name of the Vulnerable Software and Affected Versions: SKSDEV Toolkit versions 1.0.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For SKSDE...
Exploit for CVE-2024-9890
CVE-2024-9890 User Toolkit = 1.2.3 - Authenticated Subscrib...
lunary SQL Injection Vulnerability
lunary is lunary open source a production toolkit for LLM . lunary suffers from a SQL injection vulnerability that stems from the use of sql.unsafe in the order by clause of a SQL query without prior cleanup. No detailed vulnerability details are provided at this time...
NVIDIA Container Toolkit < 1.17 Data Tampering
The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17. It is, therefore, affected by a data tampering vulnerability as referenced in the November 2024 Security Bulletin. - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where...
CVE-2024-0134 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
CVE-2024-0134 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
AZL-52393 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
AZL-52452 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...