SUSE: Security Advisory (SUSE-SU-2026:0372-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0372

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-0372

Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...

EUVD-2026-0372

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

CVE-2025-0372

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...

CVE-2025-0372

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17162...

CVE-2025-0372

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...

CVE-2025-0372

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...

CVE-2025-0372

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...

CVE-2023-0372

creationtimestamp| type| source ---|---|--- 2025-03-14 14:45:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7555...

MSC-2025-0372

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

CVE-2024-0372

CVE-2024-0372 affects the WordPress plugin Views for WPForms Lite up to version 3.2.2, with a missing authorization check in get_form_fields that allows authenticated users with subscriber+ role to create or view form data. The issue is rooted in an improper permission check for the get_form_fiel...

MSC-2021-0372

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

Important Photon OS Security Update - PHSA-2023-4.0-0372

Updates of 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

CVE-2023-0372

CVE-2023-0372 concerns the EmbedStories WordPress plugin prior to 0.7.5, where shortcode attributes are not validated or escaped before output. This enables stored cross-site scripting (XSS) by users with the Contributor role or higher when the vulnerable shortcode is rendered on a page/post. Pub...

CVE-2023-0372 EmbedStories < 0.7.5 - Contributor+ Stored XSS

The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2023-0372 EmbedStories < 0.7.5 - Contributor+ Stored XSS

The EmbedStories WordPress plugin before 0.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

WordPress EmbedStories Plugin < 0.7.5 is vulnerable to Cross Site Scripting (XSS)

Software EmbedStories Type Plugin Vulnerable versions 0.7.5 Fixed in 0.7.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0372 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f3d2eb858a90 Credits István Márton Required...

Important Photon OS Security Update - PHSA-2022-3.0-0372

Updates of 'vim', 'nxtgn-openssl' packages of Photon OS have been released...

SUSE: Security Advisory (SUSE-SU-2022:0372-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...