Riasztások

Initial xbl_sec revision does not have all the debug policy features and critical checks.

On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

A race condition exists in a driver potentially leading to a use-after-free condition.

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

The Support SVG – Upload svg files in wordpress without hassle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including,...

The BNE Gallery Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 1.2.1 due to...

The Spotify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spotifyplaybutton shortcode in all versions up to, and including, 2.11...