1078 matches found
WordPress plugin Qi Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Qi Blocks versions = 1.3.2...
CVE-2023-4782 affecting package terraform for versions less than 1.3.2-19
CVE-2023-4782 affecting package terraform for versions less than 1.3.2-19. A patched version of the package is available...
PT-2024-30895 · Viala · Viala
Name of the Vulnerable Software and Affected Versions: viala versions 1.3.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For versions...
PT-2024-32568
Name of the Vulnerable Software and Affected Versions Xylus Themes WP Bulk Delete versions prior to 1.3.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS, which can be exploited...
ClamAV 安全漏洞
ClamAV Clam AntiVirus is a free and open source antivirus program from the ClamAV team. The software is used to detect Trojans, viruses, malware and other malicious threats. A security vulnerability exists in ClamAV that stems from allowing the ClamD process to write to its log files under...
CVE-2024-43791
A flaw was found in RequestStore, which provides per-request global storage. This flaw allows a malicious user to execute arbitrary code due to global permission issues...
request_store has Incorrect Default Permissions
Impact The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of thi...
CVE-2024-43791
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
CVE-2024-43791
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
UBUNTU-CVE-2024-43791
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
CVE-2024-43791 RequestStore has Incorrect Default Permissions
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
CVE-2024-43791
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
CVE-2024-43791 RequestStore has Incorrect Default Permissions
RequestStore provides per-request global storage for Rack. The files published as part of requeststore 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not...
RequestStore 安全漏洞
RequestStore is a tool by Steve Klabnik Personal Developer. A security vulnerability exists in RequestStore version 1.3.2. An attacker exploiting this vulnerability could execute arbitrary code...
PT-2024-30660 · Unknown · Request Store
Name of the Vulnerable Software and Affected Versions: request store version 1.3.2 Description: The files published as part of request store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, a...
CVE-2024-43313
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FormFacade allows Reflected XSS.This issue affects FormFacade: from n/a through 1.3.2...
PT-2024-30480 · Unknown · Formfacade
Name of the Vulnerable Software and Affected Versions: FormFacade versions 1.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This affects the FormFacade, enabling...
WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin FormFacade versions = 1.3.2...