132 matches found
CVE-2024-0604 Best WordPress Gallery Plugin – FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings
The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-0604
CVE-2024-0604 affects the FooGallery WordPress plugin (versions
WordPress FooGallery Plugin <= 2.4.7 is vulnerable to Cross Site Scripting (XSS)
Software FooGallery Type Plugin Vulnerable versions = 2.4.7 Fixed in 2.4.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0604 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID ac989fb0fb91 Credits Akbar Kustirama Required...
Malicious code in wlwz-2312-0604 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2ad1fbd0f24939513ab22226e41c6de9cd2b9cdd56c550df75ee5140c1c21db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-0604
creationtimestamp| type| source ---|---|--- 2023-08-07 18:13:47+00:00| seen| https://t.me/cibsecurity/67876...
CVE-2023-0604 WP Food Manager < 1.0.4 - Admin+ Stored XSS
The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-0604 WP Food Manager < 1.0.4 - Admin+ Stored XSS
The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress WP Food Manager Plugin < 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software WP Food Manager Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0604 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 80c244e4b184 Credits Nithissh Sathish Required...
Important Photon OS Security Update - PHSA-2023-3.0-0604
Updates of 'docker-compose', 'binutils' packages of Photon OS have been released...
Splunk Enterprise 8.1.0 < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0604)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0604 advisory. - In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a...
SUSE CVE-2013-0604
Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0603...
CVE-2022-0604
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0604
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0604
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2022-0604
Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0604
CVE-2022-0604 is a heap buffer overflow in Chrome’s Tab Groups, affecting Chrome before 98.0.4758.102. Affected component is the Tab Groups feature; root cause is a heap overflow that could be triggered by a crafted HTML page after user interaction with a malicious extension. Practical impact per...
Debian: Security Advisory (DSA-5079-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5079-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5079-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 17, 2022 https://www.debian.org/security/faq -...
OPENSUSE-SU-2022:0042-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 98.0.4758.102 boo1195986 CVE-2022-0603: Use after free in File Manager CVE-2022-0604: Heap buffer overflow in Tab Groups CVE-2022-0605: Use after free in Webstore API CVE-2022-0606: Use after free in ANGLE CVE-2022-0607: Use after fr...