Vulnerabilidades

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through <= 3.28.

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.3.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dialogity Dialogity Free Live Chat dialogity-website-chat allows Stored XSS.This issue affects Dialogity Free Live Chat: from n/a through <= 1.0.3.

NVIDIA HGX &amp; DGX GB200, GB300, B300 contienen una vulnerabilidad en el Controlador de Gestión HGX (HMC) que podría permitir a un actor malicioso con acceso administrativo en el BMC acceder al HMC como administrador. Un exploit exitoso de esta vulnerabilidad podría conducir a la ejecución de código, denegación de…

NVIDIA Triton Inference Server para Windows y Linux contiene una vulnerabilidad donde un atacante podría causar una denegación de servicio al cargar un modelo mal configurado. Un exploit exitoso de esta vulnerabilidad podría conducir a una denegación de servicio.

NVIDIA Triton Inference Server para Windows y Linux contiene una vulnerabilidad donde un atacante podría causar corrupción de memoria al identificar y acceder a la región de memoria compartida utilizada por el backend de Python. Un exploit exitoso de esta vulnerabilidad podría conducir a una denegación de servicio.

NVIDIA Triton Inference Server para Windows y Linux contiene una vulnerabilidad donde un atacante podría causar una escritura fuera de límites mediante una entrada especialmente diseñada. Un exploit exitoso de esta vulnerabilidad podría conducir a una denegación de servicio.

NVIDIA Triton Inference Server para Windows y Linux contiene una vulnerabilidad en el backend de Python, donde un atacante podría causar una ejecución remota de código manipulando el parámetro del nombre del modelo en las API de control del modelo. Un exploit exitoso de esta vulnerabilidad podría conducir a ejecución…

NVIDIA Triton Inference Server contiene una vulnerabilidad en el backend de DALI donde un atacante puede causar un problema de validación de entrada incorrecta. Un exploit exitoso de esta vulnerabilidad puede llevar a la ejecución de código.

El plugin Media Player Addons for Elementor para WordPress es vulnerable a cross-site scripting almacenado a través de los parámetros 'subtitle_ssize', 'track_title' y 'track_artist_name' en la versión 1.0.5. Esto se debe a una sanitización de entrada y un escape de salida insuficientes en atributos proporcionados por…

El plugin Social Media Shortcodes para WordPress es vulnerable a cross-site scripting almacenado a través del shortcode 'twitter' del plugin en todas las versiones hasta e incluyendo la 1.3.1 debido a una sanitización de entrada y un escape de salida insuficientes en los atributos proporcionados por el usuario. Esto…

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to run code on the platform host as a non-privileged user. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering.

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to a privileged account . A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure and data tampering.

A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or pointers that…

A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122: Heap-based Buffer Overflow, a heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Download Media Counter easy-download-media-counter allows Stored XSS.This issue affects Easy Download Media Counter: from n/a through <= 1.2.

Vulnerabilidad de Asignación Incorrecta de Privilegios en John Luetke Media Author media-author permite la escalada de privilegios. Este problema afecta a Media Author: desde n/a hasta menor o igual a 1.0.4.

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account.

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access level. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering.

NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.