CVE-2025-0447

Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

CVE-2025-0447

CVE-2025-0447 affects Google Chrome/Chromium where an inappropriate Navigation implementation before 132.0.6834.83 allows privilege escalation via a crafted HTML page. The issue is documented across multiple sources (Chromium/DC updates and Debian security advisory), with fixes shipped in Chromiu...

boltchat (>=0.2.0, <=0.2.2), cargo-generate-rpm (>=0.10.0, <=0.11.0) +17 more potentially affected by CVE-2024-53856 via pgp (>=0.7.2, <=0.9.0)

pgp CARGO version =0.7.2, =0.2.0, =0.10.0, =0.8.0, =0.2.0, =0.1.0, =0.1.0, =0.19.0, =0.9.0-alpha.1, =0.0.1, =0.7.0, =0.8.1 - rpm-rs-temporary 0.6.1 - rpmrepometadata 0.2.0 and more Source cves: CVE-2024-53856 Source advisory: OSV:RUSTSEC-2024-0447...

WordPress ArtiBot Plugin <= 1.1.6 is vulnerable to Broken Access Control

Software ArtiBot Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0447 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e881969f36c0 Credits Francesco Carlucci Required privilege...

CVE-2024-0447

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the artibotupdate function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with...

CVE-2024-0447

CVE-2024-0447 affects the ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress. The vulnerability is caused by a missing capability check in the artibot_update function, present in all versions up to and including 1.1.6, allowing authenticated attackers with subscriber-level access a...

SUSE: Security Advisory (SUSE-SU-2023:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-0447

The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clearallcache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear t...

CVE-2023-0447

CVE-2023-0447 affects the WordPress plugin My YouTube Channel . The vulnerability is an authorization bypass caused by a missing capability check in the clear_all_cache function, present in versions up to and including 3.0.12.1. This could allow authenticated attackers with subscriber-level permi...

WordPress YouTube Channel Plugin <= 3.0.12.1 is vulnerable to Broken Access Control

Software YouTube Channel Type Plugin Vulnerable versions = 3.0.12.1 Fixed in 3.23.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0447 Patch priority Medium CVSS severity Medium 4.3 Developer Aleksandar Urošević PSID 5cd4c6177416 Credits WordfenceTeam...

CVE-2022-0447

The CVE-2022-0447 issue affects the WordPress Post Grid plugin prior to version 2.1.16. The vulnerability arises because the post_types parameter is not sanitized/escaped before being echoed in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, which is accessible to ...

Important Photon OS Security Update - PHSA-2022-0447

Updates of 'mariadb' packages of Photon OS have been released...

Mageia: Security Advisory (MGASA-2014-0447)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor.Win32.SVC Directory Traversal

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/011961a42700e7385a106d362eb661c7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.SVC Vulnerability: Directory Traversal Description: The malware listens on TCP port...

SUSE: Security Advisory (SUSE-SU-2015:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:0447-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0447

creationtimestamp| type| source ---|---|--- 2020-11-10 16:27:16+00:00| seen| https://t.me/cibsecurity/16064...

CVE-2020-0447

CVE-2020-0447 is described in connected documents as an out-of-bounds write caused by a missing bounds check, linked to Android SoC component A-168251617. The OSV entry ASB-A-168251617 explicitly states the issue as an out-of-bounds write; other sources (NVD, Red Hat, CVE listings) reflect this d...

CVE-2020-0447

There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617...

Cross-site request forgery in Django

Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX requests that leverage a "combination of browser plugins...