WordPress Drag and Drop Multiple File Upload PRO Plugin < 5.0.6.4 is vulnerable to Cross Site Scripting (XSS)

Software Drag and Drop Multiple File Upload PRO Type Plugin Vulnerable versions 5.0.6.4 Fixed in 5.0.6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1282 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 21c6dea8a7cd Credi...

Huawei EulerOS: Security Advisory for perl-DBI (EulerOS-SA-2023-1282)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-1282

creationtimestamp| type| source ---|---|--- 2022-05-02 20:28:09+00:00| seen| https://t.me/cibsecurity/41741...

CVE-2022-1282

CVE-2022-1282 affects the WordPress plugin Photo Gallery by 10Web (before 1.6.3). The issue is a reflected XSS: $_GET['image_url'] is not sanitized and is echoed back in the editimage_bwg AJAX action. This can allow script execution via a crafted image_url payload. Remediation is upgrading to ver...

SUSE: Security Advisory (SUSE-SU-2021:1282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1282-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1282

CVE-2021-1282 affects Cisco Unified Communications Manager IM&P, Unified CM, and Unified CM SME via multiple vulnerabilities that enable path traversal and SQL injection in the web interface. The SQL injection vulnerability also impacts the other CM products. Cisco’s advisory notes improper valid...

Microsoft Windows Multiple Vulnerabilities (KB4561612)

This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1282

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306,...

CVE-2020-1282

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1231, CVE-2020-1233, CVE-2020-1235, CVE-2020-1265, CVE-2020-1304, CVE-2020-1306,...

CVE-2020-1282

Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.

KB4561602: Windows 10 Version 1709 June 2020 Security Update

The remote Windows host is missing security update 4561602. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2017-1282)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : php71 / php72,php73 (ALAS-2019-1282)

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...

CVE-2019-1282

CVE-2019-1282 affects the Windows Common Log File System (CLFS) Driver. It is a information-disclosure vulnerability caused by improper handling of sandbox checks in CLFS, enabling local attackers to read data outside its intended limits after logging on and running a crafted application. Exploit...

Microsoft Windows Multiple Vulnerabilities (KB4515384)

This host is missing a critical security update according to Microsoft KB4515384 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4516070)

This host is missing a critical security update according to Microsoft KB4516070 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

KB4516070: Windows 10 September 2019 Security Update

The remote Windows host is missing security update 4516070. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4516068: Windows 10 Version 1703 September 2019 Security Update

The remote Windows host is missing security update 4516068. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4516066: Windows 10 Version 1709 September 2019 Security Update

The remote Windows host is missing security update 4516066. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...