3626 matches found
CVE-2024-35751 WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10...
CVE-2023-49441
dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery...
BELL-CVE-2024-36946
Bulletin has no description...
BELL-CVE-2024-36891
Bulletin has no description...
BELL-CVE-2024-36899
Bulletin has no description...
RHEL 6 : python-pygments (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: Shell injection in FontManager.getnixfontpath CVE-2015-8557 Note that Nessus has not tested for th...
MGASA-2024-0202 Updated gifsicle packages fix security vulnerability
gifsicle-1.94 was found to have a floating point exception FPE vulnerability via resizestream at src/xform.c. CVE-2023-46009...
OPENSUSE-SU-2024:0146-1 Security update for gifsicle
This update for gifsicle fixes the following issues: Update to version 1.95: - CVE-2023-46009: Fixed floating point exception vulnerability via resizestream at src/xform.c boo1216403...
SUSE-SU-2024:1789-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating bsc1224388...
CVE-2021-47503
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsiremovehost in pm8001alloc Calling scsiremovehost before scsiaddhost results in a crash: BUG: kernel NULL pointer dereference, address: 0000000000000108 RIP: 0010:devicedel+0x63/0x440 Call Trace:...
CVE-2024-35595
An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...
BELL-CVE-2023-52871
Bulletin has no description...
BELL-CVE-2023-52768
Bulletin has no description...
BELL-CVE-2023-52757
Bulletin has no description...
CVE-2021-47363
The CVE-2021-47363 issue is a Linux kernel vulnerability in the nexthop path where a resilient nexthop group could cause a division by zero when a stub nh_res_table with zero buckets is assigned during replacement while traffic is flowing. Roots cause: the data path could still reference the old ...
BELL-CVE-2024-35921
Bulletin has no description...
BELL-CVE-2024-35850
Bulletin has no description...
BELL-CVE-2023-52677
Bulletin has no description...
CVE-2024-35806
In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Always disable interrupts when taking cgrlock smpcallfunctionsingle disables IRQs when executing the callback. To prevent deadlocks, we must disable IRQs when taking cgrlock elsewhere. This is already done by...
Huawei EulerOS: Security Advisory for libtommath (EulerOS-SA-2024-1688)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...