CVE-2024-47386

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through = 3.0.8...

CVE-2024-47386

CVE-2024-47386 affects The Ultimate WordPress Toolkit – WP Extended (WordPress plugin) up to version 3.0.8. Root cause: improper input neutralization during web page generation, enabling reflected XSS. CVSSv3.1 base score 7.1 (HIGH). Remediation: upgrade to v3.0.9 or later; Patchstack and CVE rec...

SUSE CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

PT-2024-32605 · WordPress · Wp Extended

Name of the Vulnerable Software and Affected Versions: The Ultimate WordPress Toolkit – WP Extended versions n/a through 3.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Reflected XSS. This allows...

WordPress plugin The Ultimate WordPress Toolkit – WP Extended 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin The Ultimate WordPress Toolkit - WP...

[SECURITY] [DSA 5784-1] oath-toolkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 04, 2024 https://www.debian.org/security/faq -...

CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

NVIDIA CUDA Toolkit < 12.6.77 (12.6U2) Multiple Vulnerabilities (October 2024)

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.6.77 12.6U2. It is, therefore, affected by multiple vulnerabilities as referenced in the October 2024 advisory. - NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool whe...

Debian dsa-5784 : liboath-dev - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5784 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/...

OATH Toolkit 安全漏洞

OATH Toolkit is an open source toolkit from deepin. A security vulnerability exists in OATH Toolkit versions 2.6.7 through 2.6.11, which stems from a PAM module that allows a malicious user to compromise the environment when placing an OTP status file in a user's home directory...

UBUNTU-CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

DSA-5784-1 oath-toolkit - security update

Bulletin has no description...

[ASA-202410-1] oath-toolkit: privilege escalation

Arch Linux Security Advisory ASA-202410-1 ========================================= Severity: High Date : 2024-10-04 CVE-ID : CVE-2024-47191 Package : oath-toolkit Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2857 Summary ======= The package oath-toolkit befor...

CVE-2024-0125

A flaw was found in the NVIDIA CUDA toolkit. A user can cause a NULL pointer dereference via the nvdisam command line tool by running nvdisasm on a malformed ELF file, leading to a limited denial of service...

CVE-2024-0124

A flaw was found in the NVIDIA CUDA toolkit. A user can cause nvdisasm to read freed memory via the nvdisam command line tool by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...

CVE-2024-0123

A flaw was found in the NVIDIA CUDA toolkit. This issue may allow an attacker to cause an improper validation in input issue via the nvdisasm command line tool by tricking the user into running nvdisasm on a malicious ELF file, leading to a denial of service...

CVE-2024-0125

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...

CVE-2024-0125

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...

DEBIAN-CVE-2024-0124

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...

DEBIAN-CVE-2024-0125

NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...