Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
XSS
Galaxkey
NVD
VulDB
CVSS 3.1
5.4
EPSS
0.5%
rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
Linux
Information Disclosure
Linux Kernel
NVD
GitHub
CVSS 3.1
5.5
EPSS
0.3%
rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
Linux
Information Disclosure
Linux Kernel
NVD
GitHub
CVSS 3.1
5.5
EPSS
0.3%