Important Photon OS Security Update - PHSA-2023-4.0-0520

Updates of 'squid', 'vim' packages of Photon OS have been released...

CVE-2023-0520

creationtimestamp| type| source ---|---|--- 2023-05-15 16:43:22+00:00| seen| https://t.me/cibsecurity/64129 2025-01-24 21:05:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3023...

CVE-2023-0520

The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin,...

CVE-2023-0520 RapidExpCart <= 1.0 - Stored XSS via CSRF

The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin,...

CVE-2023-0520

CVE-2023-0520 corresponds to a Stored XSS in the RapidExpCart WordPress plugin up to version 1.0. The vulnerability arises because the url parameter in the rapidexpcart endpoint is not sanitized/escaped before storage and page output, enabling an attacker to inject script that can be executed in ...

CVE-2023-0520 RapidExpCart <= 1.0 - Stored XSS via CSRF

The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vulnerability which could be used against high-privilege users such as admin,...

WordPress RapidExpCart Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software RapidExpCart Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0520 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 78fd6df3f13c Credits Shreya Pohekar Required privile...

SUSE CVE-2014-0520

Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517,...

CVE-2022-0520

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2022-0520

CVE-2022-0520 is a Use After Free vulnerability in the radare2.js module for NPM, prior to version 5.6.2. The issue affects radare2.js code paths handling memory and can lead to instability or potential exploitation. Affected product/component: radare2.js (NPM) with Radare2 framework. Root cause:...

CVE-2022-0520 Use After Free in radareorg/radare2

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2022-0520 Use After Free in radareorg/radare2

Use After Free in NPM radare2.js prior to 5.6.2...

CVE-2021-0520

creationtimestamp| type| source ---|---|--- 2021-06-21 20:15:18+00:00| seen| https://t.me/cibsecurity/25580 2021-06-22 02:48:05+00:00| published-proof-of-concept| Telegram/xnMFDn9io3SDNmWujunWMr3nkLifunlCHis6gPXQfPkMU...

CVE-2021-0520

CVE-2021-0520 describes a use-after-free due to a race condition in MemoryFileSystem.cpp and related files, enabling local escalation of privilege with no additional execution privileges or user interaction. Affected: Android (Android-11 and Android-10 per the Initial document). The vulnerability...

CVE-2020-0520

CVE-2020-0520 is a path traversal vulnerability in igdkmd64.sys affecting Intel Graphics Drivers prior to 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100. The underlying issue allows an authenticated local attacker with low privileges to potentially escalate privileges or cause a De...

High-Severity Flaws Plague Intel Graphics Drivers

Intel has issued security patches for six high-severity vulnerabilities in its Windows graphics drivers which, if exploited, could enable escalation of privilege, denial of service DoS and information disclosure. The graphics driver is software that controls how graphic components work with the...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0502 Description:...

RHEL 7 : firefox (RHSA-2020:0520)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0520 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 7 : firefox (ELSA-2020-0520)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0520 advisory. 68.5.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

RHEL 6 : flash-plugin (RHSA-2018:0520)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0520 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...