1121 matches found
Cilium 日志信息泄露漏洞
Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A logging information disclosure vulnerability exists in Cilium that stems from Cilium logging...
PT-2023-10281 · WordPress · Freshdesk Plugin
Name of the Vulnerable Software and Affected Versions: Freshdesk Plugin version 1.7 Description: A critical issue has been found in the Freshdesk Plugin on WordPress, affecting some unknown functionality. This issue leads to open redirect and can be exploited remotely. Recommendations: For...
CVE-2012-10011
A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by this issue is the function hdaddmedia/hdupdatemedia of the file functions.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely...
PT-2023-9948 · Unknown · Hd Flv Player Plugin
Name of the Vulnerable Software and Affected Versions: HD FLV Player Plugin versions up to 1.7 Description: A critical issue has been found in the HD FLV Player Plugin, affecting the function hd add media/hd update media of the file functions.php. The manipulation of the argument name leads to SQ...
CVE-2023-28462
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 Enterprise, 5.20.0 and newer Enterprise, and 5.2020.1 and newer Community, when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed...
Google Golang 安全漏洞
Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...
Debian: Security Advisory (DLA-202-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-297-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-299-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-1155
The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ndccmetaboxccpriceicon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-lev...
WordPress 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress Saan World Clock Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS)
Software Saan World Clock Type Plugin Vulnerable versions = 1.8 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0145 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID cb720ac68691 Credits Lana Codes Required...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: terraform-provider-sendgrid-fips, grpcurl, dynamic-localpv-provisioner-fips, kube-state-metrics, restic, k3d, dynamic-localpv-provisioner, kubeflow, wireguard-go, terraform-provider-sendgrid, gke-gcloud-auth-plugin, hey, go, kubeflow-fips, kubeflow-katib...
CVE-2023-23108
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...
Input validation
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...
CVE-2023-23109
CVE-2023-23109 affects crasm 1.8-3. The issue stems from invalid input validation when specific files are passed on the command line, causing a divide-by-zero fault in opdiv. No exploitation details are provided in the sources. Mitigation/workaround: restrict the input to prevent the problematic ...
CRASM 代码问题漏洞
CRASM is a portable cross assembler for the 6800, 6801, 6803, 6502, 65C02, and Z80 by Colin Bourassa, Individual Developer. A security vulnerability exists in CRASM version 1.8-3, which stems from invalid input validation, where a specific file crasm passed to a command-line application may cause...
CVE-2023-23108
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc...
