A simpler, more integrated approach to data governance

It’s no secret that the volume of data created by organizations and people multiplies daily. And, in the digital—and hybrid work—world we live in, that data is spread across more tools, platforms, devices, and clouds than ever before, creating regulatory challenges and security risks. Organizatio...

CVE-2021-24643

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

Cross site scripting

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643 WP Map Block < 1.2.3 - Contributor+ Stored Cross-Site Scripting

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24643

The CVE-2021-24643 entry concerns the WordPress plugin WP Map Block (versions before 1.2.3). The root cause is insufficient escaping of certain attributes in the block, enabling Stored Cross-Site Scripting (XSS) when a user with a low privilege (contributor) interacts with the block (e.g., adding...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin WP Map Block, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute...

PT-2021-16160

Name of the Vulnerable Software and Affected Versions WP Map Block WordPress plugin versions prior to 1.2.3 Description The issue allows users with a role as low as contributor to perform Stored Cross-Site Scripting attacks due to the plugin not escaping some attributes of the WP Map Block...

CVE-2021-24643: Improper Neutralization of Input During Web Page Generation

The WP Map Block WordPress plugin before 1.2.3 does not escape some attributes of the WP Map Block, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

Code injection

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

CVE-2021-29856

Summary: CVE-2021-29856 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.x (8.1.0). An authenticated user can cause a denial of service via the WebGUI Map Creation page. Impact: availability HIGH (CVSS v3.1 base score 6.5; network, low attack complexity, low privileges required, no user interaction). R...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

PT-2021-18522

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows an authenticated user to cause a denial of service through the WebGUI Map Creation page. Recommendations For IBM Tivoli Netcool/OMNIbus GUI version 8.1.0, consider...

IBM Tivoli Netcool/OMNIbus_GUI 安全漏洞

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI are both products of IBM Corporation, U.S.A. IBM Jazz for Service Management is an integrated service management product that provides visibility into the service management environment. IBM Tivoli Netcool/OMNIbusGUI is a graphical...

CVE-2021-29856: Undefined Security Weakness

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

CVE-2021-29856

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page. IBM X-Force ID: 205685...

SUSE-SU-2021:3125-1 Security update for gtk-vnc

This update for gtk-vnc fixes the following issues: - CVE-2017-5885: Correctly validate color map range indexes bsc1024268. - CVE-2017-5884: Fix bounds checking for RRE, hextile & copyrect encodings bsc1024266. - Fix crash when opening connection from a GSocketAddress bsc1046782. - Fix possible...

muduo:muduo_http_fuzzer: Use-of-uninitialized-value in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:

Project: https://github.com/chenshuo/muduo.git Detailed Report: https://oss-fuzz.com/testcase?key=6131886137671680 Project: muduo Fuzzing Engine: libFuzzer Fuzz Target: muduohttpfuzzer Job Type: libfuzzermsanmuduo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash Stat...