81 matches found
CVE-2024-0371
The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'createview' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated...
CVE-2020-0371
There is a possible out of bounds read due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-163008256...
CVE-2025-0371
creationtimestamp| type| source ---|---|--- 2025-01-21 08:32:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113865413956449112 2025-01-21 09:01:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2377 2025-01-21 09:16:02+00:00| seen|...
CVE-2025-0371 Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-0371 Jet Elements <= 2.7.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
Photon OS 3.0: Vim PHSA-2022-3.0-0371
An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0371. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20375...
Photon OS 3.0: Libxml2 PHSA-2022-3.0-0371
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0371. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-0371
creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:24+00:00| seen| https://t.me/ctinow/179594 2024-02-18 12:11:37+00:00| seen| https://t.me/ctinow/187224...
CVE-2024-0371
The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'createview' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated...
CVE-2024-0371
CVE-2024-0371 concerns the WordPress plugin Views for WPForms – Display & Edit WPForms Entries on your site frontend. The issue is a missing capability check in the create_view function, affecting all versions up to and including 3.2.2, enabling authenticated users with subscriber access and abov...
CentOS 7 : kpatch-patch (RHSA-2024:0371)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0371 advisory. - An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array...
RHSA-2024:0371
creationtimestamp| type| source ---|---|--- 2024-01-23 18:16:45+00:00| seen| https://t.me/ctinow/172194...
Important: Red Hat Security Advisory: kpatch-patch security update
An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
GitLab 11.4 < 14.5.4 / 14.6 < 14.6.4 / 14.7 < 14.7.1 (CVE-2022-0371)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all versions starting from 14.7 before 14.7.1. GitL...
CVE-2023-0371 EmbedSocial < 1.1.28 - Contributor+ Stored XSS
The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0371 EmbedSocial < 1.1.28 - Contributor+ Stored XSS
The EmbedSocial WordPress plugin before 1.1.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0371
CVE-2023-0371 affects the EmbedSocial WordPress plugin prior to version 1.1.28. The vulnerability stems from inadequate validation and escaping of shortcode attributes before output, enabling Stored XSS for users with the contributor role and above. Impact is stored cross-site scripting on pages/...
WordPress EmbedSocial Plugin < 1.1.28 is vulnerable to Cross Site Scripting (XSS)
Software EmbedSocial Type Plugin Vulnerable versions 1.1.28 Fixed in 1.1.28 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0371 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 80b948605bdb Credits István Márton Required...
MariaDB 10.0.0 < 10.0.1 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.1 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...
GitLab < 14.5.4, 14.6.x < 14.6.4, 14.7.x < 14.7.1 Information Disclosure Vulnerability
GitLab is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...