136 matches found
CVE-2023-0542
CVE-2023-0542 affects the WordPress plugin Custom Post Type List Shortcode (versions
CVE-2023-0542 Custom Post Type List Shortcode <= 1.4.4 - Contributor+ Stored XSS
The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
K3144: Apache mod_alias buffer overflow vulnerability CAN-2003-0542
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
K12445504: Intel CSME vulnerabilities CVE-2020-0541, CVE-2020-0542, CVE-2020-0545
Security Advisory Description CVE-2020-0541 Out-of-bounds write in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2020-0542 Improper buffer restrictions in subsystem fo...
Important Photon OS Security Update - PHSA-2022-0542
Updates of 'linux-aws', 'linux-esx', 'linux', 'linux-secure' packages of Photon OS have been released...
CVE-2022-0542
creationtimestamp| type| source ---|---|--- 2022-08-19 22:17:34+00:00| seen| https://t.me/cibsecurity/48455...
CVE-2022-0542
CVE-2022-0542 is a DOM-based XSS in chatwoot/chatwoot prior to version 2.7.0. Attackers can inject malicious script via user-controlled content (e.g., markdown/links) that is rendered in the DOM, enabling arbitrary JS execution. Public sources confirm the issue affects chatwoot/chatwoot before 2....
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2022-0542 Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot
Cross-site Scripting XSS - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0...
CVE-2021-0542
CVE-2021-0542 affects Android 11, with the issue residing in the BeamTransferManager.java workflow where a missing permission check in updateNotification can lead to local information disclosure of paired Bluetooth addresses. Exploitation requires no additional execution privileges but may requir...
2020.1 IPU – Intel® CSME, SPS, TXE, AMT, ISM and DAL Advisory
Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel® Dynamic Application Loader DAL ma...
CVE-2020-0542
Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...
CVE-2020-0542
CVE-2020-0542 concerns Intel CSME: Improper buffer restrictions in the subsystem affect Intel CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12, potentially enabling escalation of privileges, information disclosure, or denial of service via local access for authenticated users. Connected...
Critical Intel Flaws Fixed in Active Management Technology
Intel has released its June security updates, which address two critical vulnerabilities that, if exploited, can give unauthenticated attackers elevated privileges. The critical flaws exist in Intel’s Active Management Technology AMT, which is used for remote out-of-band management of personal...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The fix for Red Hat Bugzilla bug 656461, as provided in RHSA-2011:0542, introduced a regression in the cifsclose function in the Linux kernel's Common Internet File System CIFS implementation. A local, unprivileged user with write access to a CIFS file...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.9 atomic-openshift-web-console security update
An update for atomic-openshift-web-console is now available for Red Hat OpenShift Container Platform 3.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 7 : OpenShift Container Platform 3.10 atomic-openshift-web-console (RHSA-2019:2552)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2552 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift-web-console (RHSA-2019:1422)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:1422 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.11 atomic-openshift-web-console security update
An update for atomic-openshift-web-console is now available for Red Hat Openshift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
@eclipse-che/theia-terminal (>=0.0.1-1552991237, <=0.0.1-1566494904), @theia/cpp (>=0.4.0-next.01667bab, <=0.4.0-next.fc6e8217) +7 more potentially affected by CVE-2019-0542 via xterm (3.9.1)
xterm NPM version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on xterm and may be impacted: - @eclipse-che/theia-terminal =0.0.1-1552991237, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab, =0.4.0-next.01667bab,...