WordPress plugin Project Status 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in WordPress plug...

Eclipse Mosquitto 安全漏洞

Eclipse Mosquitto is an open source messaging agent software suite from the Eclipse Foundation. A security vulnerability exists in Eclipse Mosquitto version 1.6 through 2.0.10, where a memory leak occurs when an authenticated client sends a carefully crafted CONNECT message to the agent, which ca...

Simple-Log 跨站请求伪造漏洞

Simple-Log is an open source free blog system based on PHP+MySQL. A cross-site request forgery vulnerability exists in Simple-Log v1.6, which is caused by Simple-Log not adequately verifying that requests come from trusted users. The vulnerability can be exploited to gain privileges and execute...

GNU cflow Resource Management Error Vulnerability (CNVD-2021-36540)

GNU cflow is a flowchart generator for the GNU community that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in cflow version 1.6, which stems from the existence of a post-release use of the callchar name, int line function in...

DEBIAN-CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

Design/Logic Flaw

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

CVE-2020-23856

CVE-2020-23856 affects GNU cflow version 1.6, where a use-after-free in the function void call(char *name, int line) inside src/parser.c can cause denial of service via the caller->callee pointer. Multiple trusted sources (NVD entry and CNVD/OSV mirrors) confirm the vulnerability’s existence i...

CVE-2020-23856

Use-after-Free vulnerability in cflow 1.6 in the void callchar name, int line function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee...

CVE-2021-20565

IBM Cloud Pak for Security CP4S 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

Security update for postsrsd (moderate)

openSUSE Security Update: Security update for postsrsd Announcement ID: openSUSE-SU-2021:0669-1 Rating: moderate References: 1180251 Cross-References: CVE-2020-35573 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update...

Solaris 10 (sparc) : 125279-10

CDE 1.6: dtsession patch. Date this patch was last updated by Sun : Apr/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid148760; scriptversion"1.12";...

BlueCMS v1.6 sp1 Has Arbitrary File Deletion Vulnerability

bluecms is an application for local classifieds portal system , the development language architecture is php + mysql architecture. BlueCMS v1.6 sp1 there are arbitrary file deletion vulnerability, attackers can use the vulnerability to achieve arbitrary file deletion...

CVE-2020-36247

Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF...

[SECURITY] Fedora 32 Update: libntlm-1.6-1.fc32

A library for authenticating with Microsoft NTLMV1 challenge-response, derived from Samba sources...

Osc Open OnDemand Cross-Site Request Forgery Vulnerability

Osc Open OnDemand is an application from the US-based Osc Open Source organization. It provides a service for accessing HPC services. A cross-site request forgery vulnerability exists in Open OnDemand. The vulnerability arises from a WEB application that does not adequately validate that a reques...

EasyCMS 跨站请求伪造漏洞

EasyCMS is lightweight scalable open source content management program, following the Apache2 open source agreement. A cross-site request forgery vulnerability exists in EasyCMS 1.6. An attacker can add an administrator account via...

[SECURITY] Fedora 33 Update: libntlm-1.6-1.fc33

A library for authenticating with Microsoft NTLMV1 challenge-response, derived from Samba sources...

CVE-2021-3133

The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages...

GHSA-6GW4-X63H-5499 Ability to switch customer email address on account detail page and stay verified

Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...