135 matches found
CVE-2023-0059
The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0059 Youzify < 1.2.2 - Contributor+ Stored XSS
The Youzify WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0059
The CVE concerns the Youzify WordPress plugin before version 1.2.2, where some shortcode attributes were not validated/escaped before output, enabling a Stored XSS for users with the contributor role and above. Affected: Youzify
WordPress Youzify Plugin < 1.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Youzify Type Plugin Vulnerable versions 1.2.2 Fixed in 1.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0059 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 066f99253e79 Credits István Márton Required...
RHEL 8 : kpatch-patch (RHSA-2023:0059)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0059 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...
CVE-2022-26124
Improper buffer restrictions in BIOS firmware for some IntelR NUC Boards, IntelR NUC 8 Boards, IntelR NUC 8 Rugged Boards and IntelR NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access...
roaring-landmask (0.4.0) potentially affected by CVE-2022-3358 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3358 Source advisory: OSV:RUSTSEC-2022-0059...
Tenable SecurityCenter 5.19.x / 5.20.x / 5.21.0 Moment.js Denial of Service (TNS-2022-18) (deprecated)
This plugin has been deprecated and replaced with plugin ID 163634. %NASLMINLEVEL 80900 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/09/22. Deprecated by securitycenter5220tns202207.nasl. include'compat.inc'; if description scriptid164841; scriptversion"1.5";...
Mageia: Security Advisory (MGASA-2017-0059)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2019-0059)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0059)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2021-4.0-0059
Updates of 'linuxptp' packages of Photon OS have been released...
actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +926 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)
aesni CARGO version =0.9.0, =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...
SUSE: Security Advisory (SUSE-SU-2019:0059-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerability fixed in PEAR
A vulnerability has been fixed in PEAR ArchiveTar. A malicious party could potentially exploit the vulnerability to run execute arbitrary PHP code under the privileges of the application. To do this, the malicious party must create a rogue .tar-, .tar.gz, .bz2, or .tlz file to be processed by the...
Google Chrome < 88.0.4324.146 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 88.0.4324.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 202102stable-channel-update-for-desktop advisory. - Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed...
Google Chrome < 88.0.4324.146 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 88.0.4324.146. It is, therefore, affected by multiple vulnerabilities as referenced in the 202102stable-channel-update-for-desktop advisory. - Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a...
CVE-2020-0059
CVE-2020-0059 : An out-of-bounds read in the Android Bluetooth stack (btm_ble_batchscan_filter_track_adv_vse_cback in btm_ble_batchscan.cc) due to a missing bounds check could disclose information locally without privileges. Affected: Android 10 devices; impact described as information disclosure...