WordPress plugin Sunny Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-23899 · Palasthotel · Sunny Search

Name of the Vulnerable Software and Affected Versions: Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin versions 1.0.2 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges...

CVE-2023-41028

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root...

Juplink Intelligent Technologies RX4-1500 缓冲区错误漏洞

The Juplink Intelligent Technologies RX4-1500 is a wireless router from Juplink Intelligent Technologies. A buffer error vulnerability exists in the Juplink Intelligent Technologies RX4-1500 versions 1.0.2 through 1.0.5, which stems from the presence of a stack-based buffer overflow that can be...

PT-2023-4421 · Clamav +3 · Clamav +3

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 1.1.1 ClamAV versions prior to 1.0.2 ClamAV versions prior to 0.103.9 Description: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote...

PT-2023-27227 · Unknown · Woodpecker

Name of the Vulnerable Software and Affected Versions: Woodpecker versions prior to 1.0.2 Description: An attacker can post malformed webhook data which leads to an update of the repository data, potentially allowing the takeover of a repository. This issue is critical if the CI is configured for...

Woodpecker 输入验证错误漏洞

Woodpecker is a community branch of the Drone CI system. An input validation error vulnerability exists in Woodpecker versions 1.0.0 through 1.0.2, which can be exploited by an attacker to publish incorrectly formatted Webhook data, resulting in repository data updates...

Invalid Slice Split Results in Server Panic

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients. Impact An attacker with knowledge of this vulnerability could craft and...

RUSTSEC-2023-0095 Invalid Slice Split Results in Server Panic

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients. Impact An attacker with knowledge of this vulnerability could craft and...

odoh-rs security vulnerability

odoh-rs is a Cloudflare open source library that implements the RFC 9230 Oblivious DNS over HTTPS protocol in Rust. A security vulnerability exists in versions prior to odoh-rs rust crate 1.0.2, which stems from faulty logic during the parsing of encrypted queries, and which can be exploited by a...

Malicious code in scoot-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6be6ba14862d23e6f280567f9f5a3405b29138d36e7ba2b347ec7a02a1f34d77 The OpenSSF Package Analysis project identified 'scoot-tracking' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Amazon Linux 2 : fribidi (ALAS-2023-2116)

The version of fribidi installed on the remote host is prior to 1.0.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2116 advisory. A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially...

WordPress Product Filter Widget for Elementor Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Product Filter Widget for Elementor Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 52fb5db9bd4c Credits Rafie Muhammad...

WordPress WP VR Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WP VR Type Plugin Vulnerable versions = 1.0.1 Fixed in 1.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer WPFunnels Team PSID de1111c82f8a Credits Rafie Muhammad Patchstack Required privilege...

OpenSSL DoS Vulnerability (20230719) - Linux

OpenSSL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

WordPress CPA OFFERWALL Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software CPA OFFERWALL Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 44cddfd31257 Credits Rafie Muhammad Patchstack Required...

brsisCMS 1.0.2 Cross Site Scripting

==================================================================================================================================== | Title : brsisCMS v1.0.2 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit | | Vendor :...

PT-2023-24620

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2...

WordPress Simple Cart Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Cart Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d50ef7e26bc5 Credits Rafie Muhammad Patchstack Required...

WordPress All in One Video Downloader Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software All in One Video Downloader Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 83138c5b2fe4 Credits Rafie Muhammad...