2794 matches found
PT-2024-27312 · Sinatra · Sinatra
Name of the Vulnerable Software and Affected Versions: Sinatra versions through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions through...
CVE-2024-38712
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Qode Interactive Qi Blocks allows Stored XSS.This issue affects Qi Blocks: from n/a through 1.3...
PT-2024-28157 · Qi Blocks · Qi Blocks
Name of the Vulnerable Software and Affected Versions: Qi Blocks versions 1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For Qi Blocks...
WordPress WP Total Branding Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software WP Total Branding Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6625 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a7d5303cf6ee Credits Artem Polynko Artem Polynk...
PT-2024-26728 · Wpjohnny · Comment Reply Email
Name of the Vulnerable Software and Affected Versions: Comment Reply Email versions 1.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability and also allows Cross-Site Scripting XSS in WPJohnny, specifically in the zerOneIT Comment Reply Email...
OPENSUSE-SU-2024:14161-1 python310-rope-1.12.0-1.3 on GA media
These are all security issues fixed in the python310-rope-1.12.0-1.3 package on the GA media of openSUSE Tumbleweed...
RHEL 9 : heketi (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-2880 - I...
WordPress Qi Blocks Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Software Qi Blocks Type Plugin Vulnerable versions = 1.3 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38712 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID 2769fd09ee1f Credits João Pedro S Alcântara Kinorth Required...
WordPress Attachment File Icons (AF Icons) plugin <= 1.3 - Cross-Site Request Forgery to Arbitrary File Upload vulnerability
Cross-Site Request Forgery to Arbitrary File Upload vulnerability discovered by István Márton in WordPress Plugin Attachment File Icons versions = 1.3...
DEBIAN-CVE-2024-5971
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...
WordPress plugin Hide Dashboard Notifications security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in the...
WordPress Elegant Themes Icons plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by NGÔ THIÊN AN Patchstack Alliance in WordPress Plugin Elegant Themes Icons versions = 1.3...
WordPress Hide Dashboard Notifications Plugin <= 1.3 is vulnerable to Broken Access Control
Software Hide Dashboard Notifications Type Plugin Vulnerable versions = 1.3 Fixed in 1.3.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1955 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 47605ad93239 Credits Francesco Carlucci...
OPENSUSE-SU-2024:11187-1 libecpg6-13.4-1.3 on GA media
These are all security issues fixed in the libecpg6-13.4-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10531-1 links-2.13-1.3 on GA media
These are all security issues fixed in the links-2.13-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10729-1 dumb-2.0.3-1.3 on GA media
These are all security issues fixed in the dumb-2.0.3-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10014-1 ack-2.15_02-1.3 on GA media
These are all security issues fixed in the ack-2.1502-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10855-1 icedtea-web-1.8.6-1.3 on GA media
These are all security issues fixed in the icedtea-web-1.8.6-1.3 package on the GA media of openSUSE Tumbleweed...