168 matches found
CVE-2025-1005 ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3 (SVD-2024-1005)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1005 advisory. - In Splunk Enterprise versions below 9.2.3 and 9.1.6, and Splunk Secure Gateway versions on Splunk Cloud Platform versions bel...
SUSE: Security Advisory (SUSE-SU-2024:1005-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-1005
creationtimestamp| type| source ---|---|--- 2024-02-21 10:41:18+00:00| seen| https://t.me/ctinow/189442...
CVE-2024-1005 Shanxi Diankeyun Technology NODERP log file access
A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This vulnerability affects unknown code of the file /runtime/log. The manipulation leads to files or directories accessible. The attack can be initiated remotely. The exploit has been...
CVE-2024-1005
CVE-2024-1005 affects Shanxi Diankeyun Technology NODERP up to 6.0.2. The vulnerability targets an issue in the /runtime/log component, enabling access to files or directories. It supports remote attack, with public disclosure of the exploit. Multiple sources corroborate the affected product/vers...
MAL-2024-265 Malicious code in wlwz-2312-1005 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 755645668d0d7b57d4a5b274ec1f1a3c341498394dd30796c3affe240b4938a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Oracle Linux 5 : sysstat (ELSA-2011-1005)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1005 advisory. 7.0.2-11 - Related: 716959 fix cve-2007-3852 - sysstat insecure temporary file usage 7.0.2-10 - Resolves: 716959 fix cve-2007-3852 - sysstat insecure temporary...
CVE-2023-28231
creationtimestamp| type| source ---|---|--- 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005 2023-04-28 11:24:40+00:00| published-proof-of-concept| https://t.me/crackcodes/3342 2023-04-28 11:25:32+00:00| published-proof-of-concept|...
CVE-2023-1005
creationtimestamp| type| source ---|---|--- 2023-02-24 12:49:06+00:00| seen| https://t.me/cibsecurity/58848...
CVE-2023-1005
A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...
CVE-2023-1005
CVE-2023-1005 affects JP1016 Markdown-Electron. A vulnerability in unknown functionality enables code injection with local attack requirements; exploit disclosed publicly and no version details or updates are provided. Several sources reiterate lack of known fixed versions; remediation status is ...
SUSE CVE-2011-1005
The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exceptiontos method, as demonstrated by changing an intended pathname...
CVE-2022-1005
creationtimestamp| type| source ---|---|--- 2022-06-08 14:45:46+00:00| seen| https://t.me/cibsecurity/44000...
CVE-2022-1005
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...
CVE-2022-1005 WP Statistics < 13.2.2 - Reflected Cross-Site Scripting
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...
CVE-2022-1005
CVE-2022-1005 affects the WordPress WP Statistics plugin prior to version 13.2.2. The root cause is failure to sanitize the REQUEST_URI parameter before echoing it in the rendered page, enabling Cross-Site Scripting (XSS) in browsers that do not encode characters. Impact is XSS in affected plugin...
CVE-2022-1005 WP Statistics < 13.2.2 - Reflected Cross-Site Scripting
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUESTURI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting XSS in web browsers which do not encode characters...
CVE-1005-1759
The provided connected Ubuntu advisory (USN-171-1) details multiple PHP4-related issues tied to CVE-1005-1759. The php4-dev package ships shtool in /usr/lib/php4/build/, where shtool created temporary files insecurely, enabling a local symlink attack to write arbitrary files with the invoking use...