1718 matches found
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in versions of Th...
CVE-2021-41191
Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add @requireapikey in BOT/lib/cogs/website.p...
CVE-2021-41191
Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add @requireapikey in BOT/lib/cogs/website.p...
Code injection
Roblox-Purchasing-Hub is an open source Roblox product purchasing hub. A security risk in versions 1.0.1 and prior allowed people who have someone's API URL to get product files without an API key. This issue is fixed in version 1.0.2. As a workaround, add @requireapikey in BOT/lib/cogs/website.p...
Tran Tu Air Sender代码问题漏洞
Tran Tu Air Sender is a file transfer application by the individual developer of Tran Tu. A security vulnerability exists in Tran Tu Air Sender version 1.0.2, which allows an attacker to execute arbitrary code from a crafted file...
CVE-2021-39335
The WpGenius Job Listing WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /src/admin/class/class-wpgenious-job-listing-options.php file which allowed attackers with administrative user access to...
CVE-2021-39335
The WpGenius Job Listing WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /src/admin/class/class-wpgenious-job-listing-options.php file which allowed attackers with administrative user access to...
Internet Bug Bounty: CVE-2021-3711: SM2 decrypt buffer overflow
CVE-2021-3711 In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the...
WordPress On Page SEO + Whatsapp Chat Button plugin <= 1.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress On Page SEO + Whatsapp Chat Button plugin versions = 1.0.1. Solution Update the WordPress On Page SEO + Whatsapp Chat Button plugin to the latest available version at least 1.0.2...
CVE-2021-38623
The deferredimageprocessing aka Deferred image processing extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption...
Command injection
An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands...
Motorola CX2 日志信息泄露漏洞
The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability exists in the Motorola CX2 router that stems from a product configuration or code implementation issue, which could lead to the discovery of admin passwords and private keys in logtar packages. The following product...
CVE-2021-36979
Unicorn Engine 1.0.2 has an out-of-bounds write in tbflusharmeb called from cpuarmexecarmeb and tcgcpuexecarmeb...
CVE-2021-36979
Unicorn Engine 1.0.2 has an out-of-bounds write in tbflusharmeb called from cpuarmexecarmeb and tcgcpuexecarmeb...
Unicorn Engine 缓冲区错误漏洞
Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in Unicorn Engine 1.0.2, please follow the vendor's homepage for details of the vulnerability...
Unicorn Engine 缓冲区错误漏洞
Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in Unicorn Engine 1.0.2, please follow the vendor's homepage for details of this vulnerability...
OpenSSL Information Disclosure Vulnerability (20191206) - Windows
OpenSSL is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2012-2666
golang/go in 1.0.2 fixes all.bash on shared machines. dotest in src/pkg/debug/gosym/pclntabtest.go creates a temporary file with predicable name and executes it as shell script...
GHSA-WPGH-HMV4-R3V5 Prototype pollution in safe-obj
Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...
