76 matches found
EUVD-2026-1317
The Mamurjor Employee Info plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation on multiple administrative functions. This makes it possible for unauthenticated attackers to create, update, or delete...
CVE-2023-1317
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6...
CVE-2020-1317
An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege Vulnerability'...
CVE-2019-1317
A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'...
CVE-2010-1317
Heap-based buffer overflow in the NTLM authentication functionality in RealNetworks Helix Server and Helix Mobile Server 11.x, 12.x, and 13.x allows remote attackers to have an unspecified impact via invalid base64-encoded data...
CVE-2011-1317
Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages JSP component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service memory consumption by sending many JSP requests that trigger...
CVE-2024-1317
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘searchkey’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2020-1317
creationtimestamp| type| source ---|---|--- 2024-10-24 17:02:00+00:00| seen| https://t.me/CyberSecurityTechnologies/1261...
RHSA-2024:1317
creationtimestamp| type| source ---|---|--- 2024-03-18 18:16:21+00:00| seen| https://t.me/ctinow/210818...
CVE-2024-1317
creationtimestamp| type| source ---|---|--- 2024-03-03 10:16:44+00:00| seen| https://t.me/ctinow/198647...
CVE-2024-1317
The CVE-2024-1317 vulnerability affects the WordPress plugin RSS Aggregator by Feedzy (slug feedzy-rss-feeds). A SQL Injection exists in the search_key parameter for versions up to 4.4.2 due to insufficient escaping and improper use of prepare in a LIKE clause, allowing authenticated attackers wi...
CVE-2024-1317 RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘searchkey’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of...
SQL Injection Vulnerability Patched in RSS Aggregator by Feedzy WordPress Plugin
🎉 Did you know were running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through February 29th, 2024 when you opt to have Wordfence handle responsible disclosure! On February 1st, 2024, during our second Bug Bounty...
WordPress RSS Aggregator by Feedzy Plugin <= 4.4.2 is vulnerable to SQL Injection
Software RSS Aggregator by Feedzy Type Plugin Vulnerable versions = 4.4.2 Fixed in 4.4.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1317 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a5aca4f5509d Credits Lucio Sá Required privilege Contributor...
Rocky Linux 8 : nodejs:10 (RLSA-2020:1317)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1317 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...
osTicket < 1.16.6, 1.17.x < 1.17.3 Multiple XSS Vulnerabilities
osTicket is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2023-1317
creationtimestamp| type| source ---|---|--- 2023-03-10 18:21:13+00:00| seen| https://t.me/cibsecurity/59794 2025-02-27 21:26:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5802...
CVE-2023-1317
CVE-2023-1317 describes a reflected XSS in osTicket (osticket/osticket) prior to version 1.16.6. The visible impact is that an attacker could cause arbitrary JavaScript to run in a victim’s browser, potentially leading to data theft or unauthorized actions within the user session. The CVE is docu...
