120 matches found
CVE-2023-0087
creationtimestamp| type| source ---|---|--- 2023-01-05 22:19:13+00:00| seen| https://t.me/cibsecurity/56000...
CVE-2023-0087
The CVE-2023-0087 issue affects the WordPress Swifty Page Manager plugin up to version 3.0.1. It is caused by insufficient input sanitization and output escaping in the spm_plugin_options_page_tree_max_width parameter, enabling stored XSS. Impact requires administrator-level access to inject scri...
CVE-2023-0087 Swifty Page Manager <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
The Swifty Page Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘spmpluginoptionspagetreemaxwidth’ parameter in versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
Mageia: Security Advisory (MGASA-2014-0087)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0087)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2016-0087)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-0087
creationtimestamp| type| source ---|---|--- 2022-01-12 02:31:08+00:00| seen| https://t.me/cibsecurity/35316 2023-12-22 19:12:42+00:00| seen| https://t.me/arpsyndicate/2063 2023-12-22 20:15:45+00:00| seen| https://t.me/arpsyndicate/2070...
CVE-2022-0087
keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2022-0087 Cross-site Scripting (XSS) - Reflected in keystonejs/keystone
keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2022-0087
Keystone 6 login page vulnerability (CVE-2022-0087) involves an open redirect via the from= URL parameter, which can be escalated to reflected XSS. The issue is highlighted in the Nuclei template for Keystone 6 Login Page, describing an open redirect and potential XSS on the authentication flow. ...
CVE-2022-0087 Cross-site Scripting (XSS) - Reflected in keystonejs/keystone
keystone is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
SUSE: Security Advisory (SUSE-SU-2012:0984-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 7 : thunderbird (RHSA-2021:0087)
The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0087 advisory. - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0087)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0087-1 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has...
Oracle Linux 7 : thunderbird (ELSA-2021-0087)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-0087 advisory. 78.6.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.6.1-1 - Update to 78.6.1 Tenable has extracted the...
Important Photon OS Security Update - PHSA-2020-0087
Updates of 'go' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2020-3.0-0087
Updates of 'go' packages of Photon OS have been released...
CVE-2020-0087
In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...
CVE-2020-0087
CVE-2020-0087 affects Android 10 (framework). The issue is in ActivityManagerService.getProcessPss, enabling a side-channel information disclosure with local access and requiring user interaction to exploit. The vulnerability’s impact is partial information disclosure (high confidentiality impact...
Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability (cisco-sa-20200226-nxos-arp)
According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...