215 matches found
WordPress Songkick Concerts and Festivals plugin <= 0.9.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Pham Van Tam in WordPress Plugin Songkick Concerts and Festivals versions = 0.9.7...
WordPress Admin Options Pages plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana in WordPress Plugin Admin Options Pages versions = 0.9.7...
WordPress Guten Free Options Plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Guten Free Options versions = 0.9.7...
WordPress plugin RightMessage WP 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-7620
The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'import' function in all versions up to, and including, 0.9.7. This makes it possible for authenticated attackers, with Administrator-level access and above, to...
PT-2024-38457 · WordPress · Customizer Export/Import
Name of the Vulnerable Software and Affected Versions: Customizer Export/Import plugin for WordPress versions up to, and including, 0.9.7 Description: The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import...
RUSTSEC-2024-0347 Incorrect usage of `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
Incorrect usage of `#[repr(packed)]`
The affected versions make unsafe memory accesses under the assumption that reprpacked has a guaranteed field order. The Rust specification does not guarantee this, and https://github.com/rust-lang/rust/pull/125360 1.80.0-beta starts reordering fields of reprpacked structs, leading to illegal...
OPENSUSE-SU-2024:11178-1 libpodofo-devel-0.9.7-2.2 on GA media
These are all security issues fixed in the libpodofo-devel-0.9.7-2.2 package on the GA media of openSUSE Tumbleweed...
OESA-2024-1690 uriparser security update
The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...
uriparser 安全漏洞
Uriparser is a strictly Rfc 3986 compliant Uri parsing and processing library written in C89. A security vulnerability exists in uriparser version 0.9.7, which stems from an integer overflow via a long string...
uriparser 安全漏洞
Uriparser is a strictly Rfc 3986 compliant Uri parsing and processing library written in C89. A security vulnerability exists in uriparser version 0.9.7, which stems from the presence of an integer overflow that results in a buffer overflow...
radare2 security vulnerability
radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions v.0.9.7 through v.5.8.6, which originated from a vulnerability that allows a local attacker to cause a denial of service via the grubsfsreadextent function...
WordPress POEditor Plugin <= 0.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software POEditor Type Plugin Vulnerable versions = 0.9.7 Fixed in 0.9.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4209 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f865ac408812 Credits Dmitrii Required privilege...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...
PT-2023-20821 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at "opencats/index.php?m=candidates". This enables...
PT-2023-20820 · Opencats · Opencats
Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A Cross-Site Request Forgery CSRF issue allows attackers to force users into submitting web requests via unspecified vectors. Recommendations: For OpenCATS version 0.9.7, consider implementing anti-CSRF...
OpenCats 跨站脚本漏洞
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCATS version v0.9.7. An attacker can exploit this vulnerability to execute arbitrary Web script or HTML via a specially crafted payload injected into the city parameter of...
SUSE CVE-2007-5135
Off-by-one error in the SSLgetsharedciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738...