428 matches found
CVE-2025-26304
A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...
CVE-2024-13422
The SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 0.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...
WordPress SEO Blogger to WordPress Migration using 301 Redirection plugin <= 0.4.8 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin SEO Blogger to WordPress Migration using 301 Redirection versions = 0.4.8...
PT-2025-2164 · WordPress · Seo Blogger To Wordpress Migration Using 301 Redirection
Name of the Vulnerable Software and Affected Versions: SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress versions up to, and including, 0.4.8 Description: The issue is related to Reflected Cross-Site Scripting via the url parameter due to insufficient input sanitizatio...
WordPress plugin SEO Blogger to WordPress Migration using 301 Redirection 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin SEO Blogger t...
WordPress Squelch Tabs and Accordions Shortcodes plugin <= 0.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via tab Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via tab Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Squelch Tabs and Accordions Shortcodes versions = 0.4.8...
WordPress plugin Squelch Tabs and Accordions Shortcodes security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
CVE-2024-28232
Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has been patched in version 0.4.8 but that...
CVE-2024-28232 Username Enumeration in CasaOS via bypass of CVE-2024-24766
Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has been patched in version 0.4.8 but that...
CVE-2024-28232
The CVE-2024-28232 entry concerns a username enumeration flaw in CasaOS-UserService (CasaOS Login page). The issue arises because the login responses reveal whether a username exists, enabling enumeration. It was patched in CasaOS v0.4.8, though that version had not yet been uploaded to Go's pack...
CVE-2024-28232 Username Enumeration in CasaOS via bypass of CVE-2024-24766
Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in version 0.4.7. This issue in CVE-2024-28232 has been patched in version 0.4.8 but that...
CVE-2023-31854
std::badalloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem...
CVE-2023-31854
std::badalloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem...
CVE-2023-31854
std::badalloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem...
CVE-2023-31854
CVE-2023-31854 concerns Precomp 0.4.8, where the program mishandles std::bad_alloc. The description notes that this is disputed and should be categorized as a usability problem, which is reflected across multiple sources (NVD/Red Hat/CVE listings). The connected documents confirm the affected com...
Precomp 安全漏洞
Precomp is a command line precompressor by Christian Schneider, a personal developer, that can be used to further compress already compressed files. A security vulnerability exists in Precomp version 0.4.8, which stems from calling a fatal error termination after throwing an instance of...
PT-2024-12289 · Precomp · Precomp
Name of the Vulnerable Software and Affected Versions: Precomp version 0.4.8 Description: The issue involves the mishandling of std::bad alloc in Precomp, which is disputed as it may be categorized as a usability problem rather than a security issue. There is no information provided about the...
UBUNTU-CVE-2024-24146
A memory leak issue discovered in parseSWFDEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file...