245 matches found
CVE-2023-0147 Flexible Captcha <= 4.1 - Contributor+ Stored XSS
The Flexible Captcha WordPress plugin through 4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Flexible Captcha Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)
Software Flexible Captcha Type Plugin Vulnerable versions = 4.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0147 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 303d2e17f357 Credits István Márton Require...
CVE-2018-0147
creationtimestamp| type| source ---|---|--- 2022-12-19 17:20:10+00:00| exploited| https://t.me/truesecator/3847 2022-12-20 16:28:45+00:00| exploited| https://t.me/itsecnews/1954 2022-12-23 11:06:28+00:00| seen| https://t.me/icscert/679 2023-06-14 21:10:03+00:00| seen|...
Security Bulletin: Vulnerabilities in Intel Chipset affect IBM Cloud Pak System (CVE-2021-0060, CVE-2021-0147, CVE-2021-33080)
Summary Vulnerabilities in Intel Chipset affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-0060 DESCRIPTION: Intel SPS could allow a physical attacker to gain elevated privileges on the system, caused by insufficient...
CVE-2022-0147
creationtimestamp| type| source ---|---|--- 2022-03-14 17:18:19+00:00| seen| https://t.me/cibsecurity/38866...
CVE-2022-0147
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2022-0147
The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-0147
creationtimestamp| type| source ---|---|--- 2022-02-10 02:19:35+00:00| seen| https://t.me/cibsecurity/37173...
CVE-2021-0147
Impact summary (CVE-2021-0147) : The issue is an improper locking fault in the Power Management Controller (PMC) within certain Intel Chipset firmware. This vulnerability could allow a local, authenticated attacker to cause a denial of service, as described in multiple sources. The affected PMC v...
2021.2 IPU – Intel® Chipset Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® Chipset Firmware in Intel® Server Platform Services SPS, Intel® Active Management Technology AMT and the Intel Power Management Controller PMC may allow escalation of privilege or denial of service. Intel is releasing firmware updates to...
Mageia: Security Advisory (MGASA-2017-0147)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2018-0147)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2019-0147)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2022-4.0-0147
Updates of 'util-linux', 'rust', 'polkit' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0147
Updates of 'rust', 'polkit', 'util-linux' packages of Photon OS have been released...
SUSE: Security Advisory (SUSE-SU-2014:0623-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Backdoor.Win32.Kwak.12 Authentication Bypass / Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c25393545e5ead3a35996ef9a887bd34.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Kwak.12 Vulnerability: Remote Command Execution Description: The backdoor runs an FTP...
Backdoor.Win32.Kwak.12 Authentication Bypass
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c25393545e5ead3a35996ef9a887bd34B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Kwak.12 Vulnerability: Authentication Bypass Description: The backdoor runs an FTP...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-2166)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...