320 matches found
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerabilities have been resolved: clk: qcom: ipq8074: fixed PCI-E clock errors Fixed kernel errors related to PCI-E clocks caused by missing clock parents. pcie0rchngclksrc has numparents set to 2, but only one parent is actually set via parenthws. It should...
CVE-2026-0556
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xoeventfield' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-0556 XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xoeventfield' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-0556
CVE-2026-0556 concerns the XO Event Calendar WordPress plugin (versions
WordPress XO Event Calendar plugin <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'xoeventfield' shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin XO Event Calendar versions = 3.2.10...
PT-2026-20626
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xo event field' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2017-18541
The xo-security plugin before 1.5.3 for WordPress has XSS...
CVE-2025-52538
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability...
CVE-2025-0005
AMD XOCL driver (OpenCL) within the AMD XRT framework is affected by CVE-2025-0005 due to improper input validation, enabling a local overflow that can crash the system or cause a denial of service. Root cause: input validation flaw in XOCL. Impact: local attacker could trigger crash/DoS with low...
EUVD-2025-175507
Malicious code in xenon-comet-xo-quantum npm...
EUVD-2025-178988
Malicious code in exec-zephyr-xo-izar npm...
EUVD-2025-176543
Malicious code in sails-rollup-unuk-xo npm...
EUVD-2025-175470
Malicious code in xo-indus-procyon-indus npm...
EUVD-2025-175473
Malicious code in xo-csrf-radiant-halley npm...
EUVD-2025-175465
Malicious code in xo-phylogenetics-kastra-triton npm...
Malicious code in inflation-weywot-comet-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2494101eede652b8876724d3d4c467b0a2d07002f73e58557044c083908f9847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xo-helios-child-process-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6abf116ef5bd6a77aedf9bcc2b5428a4945e26fbf2e8c0d79a0fccebb457771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175469
Malicious code in xo-koa-metalsmith-perseus npm...
EUVD-2025-180074
Malicious code in biogeochemistry-multiverse-xo-regulus npm...
EUVD-2025-179675
Malicious code in colors-request-xo-xerxes npm...