13359 matches found
CVE-2024-40743
The Joomla! content management system is vulnerable to Cross-Site Scripting (XSS) due to improper input processing in the stripImages and stripIframes methods within the Outputfilter component. This vulnerability affects Joomla! 3.x versions prior to 3.10.17 , 4.x versions prior to 4.4.7 , and 5....
PT-2024-21721 · Joomla +2 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. No information is provided about the estimated number...
OSV-2024-925 Index-out-of-bounds in derive_collocated_motion_vectors
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537038 Crash type: Index-out-of-bounds Crash state: derivecollocatedmotionvectors derivetemporallumavectorprediction getmergecandidatelistwithoutstep9...
PT-2024-41773
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42537038 Crash type: Index-out-of-bounds Crash state: derive collocated motion vectors derive temporal luma vector prediction get merge candidate list without step 9...
kernel: ice: fix memory corruption bug with suspend and rebuild
This is a flaw in the Linux kernel's ICE driver for Intel Ethernet controllers. The problem arises when the system enters a suspended state, and the driver frees queue vectors without resetting the numqvectors variable. This oversight causes the icerebuild function to allocate an incorrectly size...
AMD Graphics Driver 安全漏洞
AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Graphics Driver that stems from the presence of weak and predictable initialization vectors that allow an attacker with privileges to reuse IV values to reverse engineer...
PT-2024-12269 · Unknown · Power Management Firmware
Name of the Vulnerable Software and Affected Versions: Power Management Firmware affected versions not specified Description: The generation of weak and predictable Initialization Vector IV in Power Management Firmware may allow an attacker with privileges to reuse IV values to reverse-engineer...
CVE-2024-32765 QTS, QuTS hero
A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...
CVE-2024-32765 QTS, QuTS hero
A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS...
SUSE CVE-2024-42113
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize numqvectors for MSI/INTx interrupts When using MSI/INTx interrupts, wx-numqvectors is uninitialized. Thus there will be kernel panic in wxallocqvectors to allocate queue vectors...
CVE-2024-28297
SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2024-28297
A SQL injection vulnerability exists in AzureSoft MyHorus version 4.3.5 . This flaw allows authenticated users to execute arbitrary SQL commands through unspecified vectors. The security impact involves the potential for unauthorized data manipulation or access. To mitigate this risk, users are r...
CVE-2024-28297
SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2024-42113
A vulnerability was found in the Linux kernel's txgbe driver involving uninitialized numqvectors when using MSI/INTx interrupts. This can lead to kernel panics during the allocation of queue vectors due to the use of undefined values. This issue was resolved by ensuring numqvectors is properly...
DLink DIR Information Disclosure (PT-2011-30)
The version of DLink DIR installed on the remote host is affected by information disclosure Vulnerability as referenced in the PT-2011-30 advisory. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vector...
DEBIAN-CVE-2024-42113
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize numqvectors for MSI/INTx interrupts When using MSI/INTx interrupts, wx-numqvectors is uninitialized. Thus there will be kernel panic in wxallocqvectors to allocate queue vectors...
UBUNTU-CVE-2024-42113
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize numqvectors for MSI/INTx interrupts When using MSI/INTx interrupts, wx-numqvectors is uninitialized. Thus there will be kernel panic in wxallocqvectors to allocate queue vectors...
PT-2024-10455
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The vulnerability is related to the use of an uninitialized resource in the Linux kernel's net component. When using MSI/INTx interrupts, the wx-num q vectors variable is uninitialized, leading...
VulnCheck KEV: CVE-2014-2908
Cross-site scripting XSS vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
