140 matches found
CVE-2026-0538
creationtimestamp| type| source ---|---|--- 2026-02-04 17:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2exxudji22...
CVE-2021-0538
In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions...
EUVD-2022-0538
Malicious code in bioql PyPI...
CVE-2025-0538
A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack...
CVE-2025-0538
creationtimestamp| type| source ---|---|--- 2025-01-17 20:57:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2198 2025-01-17 21:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpopnlbn2s 2025-01-17 22:39:16+00:00| seen|...
Photon OS 3.0: Python3 PHSA-2023-3.0-0538
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Kafka PHSA-2023-3.0-0538
An update of the kafka package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Openssl PHSA-2023-3.0-0538
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Bindutils PHSA-2023-3.0-0538
An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Containerd PHSA-2023-3.0-0538
An update of the containerd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Linux PHSA-2023-3.0-0538
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0538. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
RHSA-2024:0538
creationtimestamp| type| source ---|---|--- 2024-01-29 10:21:28+00:00| seen| https://t.me/ctinow/175143...
CVE-2024-0538
creationtimestamp| type| source ---|---|--- 2024-01-15 05:26:42+00:00| seen| https://t.me/ctinow/168145 2024-02-03 09:46:32+00:00| seen| https://t.me/ctinow/178452...
CVE-2023-0538
creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:11+00:00| seen| https://t.me/cibsecurity/59909...
CVE-2023-0538
The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0538 Campaign URL Builder < 1.8.2 - Contributor+ Stored XSS
The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2023-0538
CVE-2023-0538 affects the Campaign URL Builder WordPress plugin. Versions prior to 1.8.2 do not validate and escape some shortcode attributes before outputting them on pages/posts containing the shortcode, enabling a contributor+ user to perform a Stored XSS attack. Root cause: insufficient input...
CVE-2023-0538 Campaign URL Builder < 1.8.2 - Contributor+ Stored XSS
The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
K29814751: Intel AMT vulnerabilities CVE-2020-0537, CVE-2020-0538, and CVE-2020-0540
Security Advisory Description CVE-2020-0537 Improper input validation in subsystem for IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow a privileged user to potentially enable denial of service via network access. CVE-2020-0538 Improper input validation in subsystem fo...
WordPress Campaign URL Builder Plugin < 1.8.2 is vulnerable to Cross Site Scripting (XSS)
Software Campaign URL Builder Type Plugin Vulnerable versions 1.8.2 Fixed in 1.8.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0538 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 650b985168de Credits Lana Codes...