CVE-2024-0665 WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting

The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-0665

Summary: CVE-2024-0665 affects the WP Customer Area WordPress plugin. The vulnerability is a Reflected Cross-Site Scripting (XSS) via the tab parameter in versions up to and including 8.2.1, caused by insufficient input sanitization and output escaping. This allows unauthenticated attackers to in...

WordPress WP Customer Area Plugin <= 8.2.2 is vulnerable to Cross Site Scripting (XSS)

Software WP Customer Area Type Plugin Vulnerable versions = 8.2.2 Fixed in 8.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0665 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f88bc5bdc8b9 Credits Krzysztof Zając...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.0 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important Photon OS Security Update - PHSA-2023-3.0-0665

Updates of 'netkit-telnet', 'go' packages of Photon OS have been released...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.0 security update

Red Hat OpenShift Container Platform release 4.13.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

CVE-2023-0665 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault...

CVE-2023-0665

HashiCorp Vault’s PKI mount issuer endpoints were vulnerable to insufficient access control, allowing a remote attacker to cause a denial of service by removing an issuer or altering issuer metadata. The defect specifically affects the PKI issuer management surface but does not impact private key...

Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata

Summary Vault’s PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. This vulnerabilit...

RHEL 8 : tigervnc (RHSA-2023:0665)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0665 advisory. Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it ...

CVE-2022-0665

creationtimestamp| type| source ---|---|--- 2022-02-22 18:12:33+00:00| seen| https://t.me/cibsecurity/37887...

CVE-2022-0665 Path Traversal in pimcore/pimcore

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2...

CVE-2022-0665

Vulnerability summary (CVE-2022-0665) : A path traversal flaw exists in pimcore/pimcore prior to version 10.3.2. The vulnerability stems from insufficient validation of the importFile parameter at the endpoint /admin/translation/import, allowing an attacker to delete arbitrary files on the server...

SEL (CVE-2013-0665) (deprecated)

Plugin deprecated because acselerator is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable- ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10. Deprecated because...

CVE-2021-0665

In apusys, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672113; Issue ID: ALPS05672113...

CVE-2020-0665

creationtimestamp| type| source ---|---|--- 2021-06-11 11:58:14+00:00| published-proof-of-concept| https://t.me/ptswarm/46 2025-04-16 17:00:08+00:00| published-proof-of-concept| Telegram/A1O7WKXHB9clDzZYd4ZMA3szheiLBqo-tJ8mGUODQmNFjY 2025-05-04 21:02:14+00:00| seen|...

SUSE: Security Advisory (SUSE-SU-2014:0665-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0665-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

0665.co.kr Cross Site Scripting vulnerability OBB-1374685

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...