15 matches found
Privacy Policy Genius - Cross-Site Scripting
Privacy Policy Genius WordPress plugin v2.0.4 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13219...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator
Summary Multiple vulnerabilities were addressed in IBM Aspera Orchestrator 4.1.3 Vulnerability Details CVEID:CVE-2025-13213 DESCRIPTION: IBM Aspera Orchestrator is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to...
EUVD-2021-13219
Malware in sbrugna...
CVE-2019-13219
A NULL pointer dereference in the getwindow function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...
openSUSE Security Advisory (openSUSE-SU-2025:0039-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : stb (openSUSE-SU-2025:0039-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0039-1 advisory. Addressing the follow security issues boo1216478: CVE-2019-13217: heap buffer overflow in startdecoder CVE-2019-13218: stack buffer overflow in...
CVE-2024-13219
The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-13219
CVE-2024-13219 is a Reflected XSS in the Privacy Policy Genius WordPress plugin up to version 2.0.4, caused by insufficient sanitisation/escaping of a parameter before output. The issue could impact high-privilege users (e.g., admins) when the vulnerable plugin is active. Publicly available detai...
SUSE CVE-2019-13219
A NULL pointer dereference in the getwindow function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...
CVE-2020-13219
CVE-2020-13219 entry is rejected and does not represent an active vulnerability.
CVE-2019-13219
CVE-2019-13219 concerns the stb project (stb_vorbis). The connected OpenSUSE/OSV/Debian entries indicate this CVE is addressed in updates for the stb package (e.g., openSUSE-SU-2025:0039-1) and related Debian/DLA entries. The concrete issue is described as an uninitialized memory problem in vorbi...
CVE-2018-13219
The sell function of a smart contract implementation for YourCoin ICO Contract Name: ETH033, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13219
The CVE-2018-13219 entry concerns the sell function of a YourCoin ICO smart contract (Contract Name: ETH033). The vulnerability is an integer overflow where amount * sellPrice can evaluate to zero, potentially reducing a seller’s assets. The description and linked references confirm this in the E...