CVE-2023-0589

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2023-0589 WP Image Carousel <= 1.0.2 - Contributor+ Stored XSS

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2023-0589

The CVE-2023-0589 entry concerns WP Image Carousel (WordPress)

CVE-2023-0589 WP Image Carousel <= 1.0.2 - Contributor+ Stored XSS

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...

CVE-2022-0589

CVE-2022-0589 is a Cross-site Scripting (XSS) vulnerability in librenms/librenms, stored XSS prior to version 22.1.0. The root cause cited across sources is lack of data validation/filtering and output in templates (notably Create/Modify Transfer Group, Add/Edit Service, and Edit Service), leadin...

CVE-2022-0589 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in Packagist librenms/librenms prior to 22.1.0...

Mageia: Security Advisory (MGASA-2014-0448)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0589

In BTMTryAllocateSCN of btmscn.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1...

CVE-2021-0589

CVE-2021-0589 is an Android local privilege escalation vulnerability: an out-of-bounds write in BTM_TryAllocateSCN (btm_scn.cc) caused by an incorrect bounds check, enabling local execution as a privileged context without user interaction. Affected Android versions include 8.1, 9, 10, and 11 (per...

CVE-2019-0589

CVE-2019-0589 is rejected/not used per the initial description.

CVE-2013-0589

IBM iNotes (also IBM Lotus iNotes) before 8.5.3 Fix Pack 6 and 9.x before 9.0.1 is vulnerable to a remote information-disclosure via a crafted e-mail message that can bypass the remote image filtering mechanism. Exploitation would allow an attacker to obtain sensitive information from affected us...

CVE-2018-0589

CVE-2018-0589 affects the WordPress plugin Ultimate Member, prior to version 2.0.4. The vulnerability enables a remote authenticated attacker to bypass access restrictions on the plugin and add a new form via the plugin’s Forms page. The issue is an access restriction bypass (CWE-284) and is repo...

JVN#28804532: Multiple vulnerabilities in WordPress plugin "Ultimate Member"

The WordPress plugin "Ultimate Member" provided by Ultimate Member contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0585 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

CVE-2017-0589

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0589

CVE-2017-0589 is a remote code execution vulnerability in libhevc used by the Android Mediaserver . A specially crafted media file could cause memory corruption during processing, enabling code execution within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. T...

CVE-2003-0589

CVE-2003-0589 affects Digi-ads 1.1 where admin.php allows remote authentication bypass by sending a cookie with the username set to the administrator’s name. The root cause is an improper condition in admin.php that does not require a correct password, enabling an attacker to gain admin access vi...

CVE-2016-0589

Technical details about CVE-2016-0589 are not provided in the supplied documents. Connected records mention Oracle E-Business Suite components but do not specify affected versions, root cause, exploit vectors, or fixes. Monitor for updates.

Oracle: Security Advisory (ELSA-2013-0589)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0589

The CVE-2015-0589 issue affects Cisco WebEx Meetings Server (versions 1.0–1.5). The root cause is improper user input validation in the administrative web interface, allowing an authenticated, remote attacker to inject commands and execute arbitrary OS commands with root privileges via unspecifie...