PT-2024-29308

Name of the Vulnerable Software and Affected Versions: tsMuxer version nightly-2024-03-14-01-51-12 Description: A stack-based buffer over-read in tsMuxer allows attackers to cause Information Disclosure via a crafted TS video file. Recommendations: For tsMuxer version nightly-2024-03-14-01-51-12,...

PT-2024-33684

Name of the Vulnerable Software and Affected Versions: tsMuxer version nightly-2024-04-05-01-53-02 Description: The issue allows attackers to cause Denial of Service DoS via a crafted TS video file. This is due to a negative-size-param in the affected version of tsMuxer. Recommendations: For...

CVE-2024-21538 vulnerabilities

Vulnerabilities for packages: node-gyp, opensearch-dashboards-fips, kubeflow-katib, sqlpad, pgadmin4, lerna, py3-captum, graalvm, renovate, ts-patch, eslint, kibana, argo-workflows, tileserver-gl-fips, arangodb, tileserver-gl, opensearch-dashboards, airflow...

The vulnerability of the dynamicImport() function in the lilconfig configuration tool allows a hacker to execute arbitrary code.

The vulnerability of the dynamicImport function in the lilconfig configuration tool is related to improper handling of code generation when processing the.d.ts syntax. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2022-48995

In the Linux kernel, the following vulnerability has been resolved: Input: raydiumtsi2c - fix memory leak in raydiumi2csend There is a kmemleak when test the raydiumi2cts with bpf mock device: unreferenced object 0xffff88812d3675a0 size 8: comm "python3", pid 349, jiffies 4294741067 age 95.695s h...

DEBIAN-CVE-2022-48995

In the Linux kernel, the following vulnerability has been resolved: Input: raydiumtsi2c - fix memory leak in raydiumi2csend There is a kmemleak when test the raydiumi2cts with bpf mock device: unreferenced object 0xffff88812d3675a0 size 8: comm "python3", pid 349, jiffies 4294741067 age 95.695s h...

CVE-2024-8625

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-8625

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-8625 TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-8625

The TS Poll WordPress plugin is affected: versions prior to 2.4.0 do not sanitize/escape a parameter before using it in a SQL statement, enabling an SQL injection through admin-level access. Documented impact correlates to high severity (CVSS 3.1 base: 7.2). Affected component: the plugin’s SQL u...

CVE-2024-8625 TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the Input subsystem raydiumtsi2c driver...

WordPress plugin TS Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-39140

Name of the Vulnerable Software and Affected Versions: TS Poll WordPress plugin versions prior to 2.4.0 Description: The issue allows admins to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before using it in a SQL statement. Recommendations: For versio...

Malicious code in ts-calling-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0db756d26a3007b10201297415dfaa2cf6315b37f9ef0b88fa32feac6aaf42bd The OpenSSF Package Analysis project identified 'ts-calling-test-app' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9305 Malicious code in ts-calling-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0db756d26a3007b10201297415dfaa2cf6315b37f9ef0b88fa32feac6aaf42bd The OpenSSF Package Analysis project identified 'ts-calling-test-app' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in noblox.ts-fetch (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9278 Malicious code in ts-jest-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c8f8d1bb529584dca1e5c310895c30958385530f5241f3a8a364caffb33347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-9022

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...