320 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: clk: qcom: ipq8074: Fixed the PCI-E clock-related errors. Fixed kernel errors related to PCI-E clocks caused by a missing clock parent. pcie0rchngclksrc has numparents set to 2, but only one parent is actually set via parenthw...
CVE-2026-0556
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xoeventfield' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2026-0556
CVE-2026-0556 concerns the XO Event Calendar WordPress plugin (versions
CVE-2026-0556 XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xoeventfield' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress XO Event Calendar plugin <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'xoeventfield' shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin XO Event Calendar versions = 3.2.10...
PT-2026-20626
The XO Event Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xo event field' shortcode in all versions up to, and including, 3.2.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2017-18541
The xo-security plugin before 1.5.3 for WordPress has XSS...
CVE-2025-52538
Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability...
CVE-2025-0005
AMD XOCL driver (OpenCL) within the AMD XRT framework is affected by CVE-2025-0005 due to improper input validation, enabling a local overflow that can crash the system or cause a denial of service. Root cause: input validation flaw in XOCL. Impact: local attacker could trigger crash/DoS with low...
EUVD-2025-175692
Malicious code in volcanology-yakutsk-phenomic-xo npm...
EUVD-2025-178751
Malicious code in geckodriver-singularity-radiometric-xo npm...
Malicious code in xo-csrf-radiant-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c1bd2a4a7e5e0d89c6e97c3243f89b4b6801a28f85c0a3bb946840fa5efd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177406
Malicious code in orogeny-algol-kastra-xo npm...
EUVD-2025-178415
Malicious code in inflation-weywot-comet-xo npm...
EUVD-2025-178558
Malicious code in helmet-neutronstar-xo-xerxes npm...
Malicious code in inflation-weywot-comet-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2494101eede652b8876724d3d4c467b0a2d07002f73e58557044c083908f9847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175467
Malicious code in xo-morgan-css-loader-prompts npm...
EUVD-2025-175507
Malicious code in xenon-comet-xo-quantum npm...
EUVD-2025-175469
Malicious code in xo-koa-metalsmith-perseus npm...
EUVD-2025-175464
Malicious code in xo-quasarjet-publish-npm npm...