CVE-2024-1331 Team Members < 5.3.2 - Author+ Stored XSS

The Team Members WordPress plugin before 5.3.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-1331

CVE-2024-1331 affects the Team Members WordPress plugin prior to version 5.3.2. The vulnerability arises because certain shortcode attributes are not validated or escaped before being output in a post/page where the shortcode is embedded. This can allow users with the author role or higher to per...

CVE-2024-1331 Team Members < 5.3.2 - Author+ Stored XSS

The Team Members WordPress plugin before 5.3.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...

GHSA-HM9V-VJ3R-R55M PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage. That is, for example, the case if the user extracted metadata from such ...

CVE-2023-1331

creationtimestamp| type| source ---|---|--- 2023-04-17 16:38:45+00:00| seen| https://t.me/cibsecurity/62272...

CVE-2023-1331

CVE-2023-1331 affects the WordPress Redirection plugin prior to version 1.1.5. The vulnerability is a CSRF flaw in the uninstall action that can allow an authenticated admin to delete all redirects via a CSRF attack. Root cause: missing CSRF checks in uninstall logic. Impact stated: allows manipu...

CVE-2023-1331 Redirection < 1.1.5 - Plugin Reset via CSRF

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack...

WordPress Redirect Redirection Plugin < 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Redirect Redirection Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-1331 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2e8614381128 Credits Mohamed Selim...

Security Updates for Microsoft Office Products C2R (October 2019)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Security Updates for Microsoft Excel Products C2R (October 2019)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

CVE-2022-1331

creationtimestamp| type| source ---|---|--- 2022-05-03 22:35:53+00:00| seen| https://t.me/cibsecurity/41840...

CVE-2022-1331

CVE-2022-1331 affects Delta Electronics DMARS (all versions prior to v2.1.10.24). The issue is improper restriction of XML External Entity references when processing project/DMARS files, leading to potential unauthorized information disclosure. Multiple sources (NVD entry, CVE CVE-2022-1331 recor...

CVE-2022-1331 Delta Electronics DMARS Improper Restriction of XML External Entity Reference

In four instances DMARS All versions prior to v2.1.10.24 does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure...

Delta Electronics DMARS

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DMARS Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain sensitive information...

CVE-2021-1331

Cisco Small Business RV Series routers (RV016, RV042, RV042G, RV082, RV320, RV325) are affected by multiple vulnerabilities in the web-based management interface that allow an authenticated attacker to execute arbitrary code or cause a reboot/DoS. Root cause is improper validation of user-supplie...

CVE-2020-15817

In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues...

CVE-2020-1331

A spoofing vulnerability exists when System Center Operations Manager SCOM does not properly sanitize a specially crafted web request to an affected SCOM instance, aka 'System Center Operations Manager Spoofing Vulnerability'...

CVE-2020-1331

The CVE-2020-1331 entry maps to a spoofing vulnerability in System Center Operations Manager (SCOM), specifically affecting the 2016 Web Console. The issue arises when the web interface fails to properly sanitize specially crafted requests, enabling spoofing and potential cross-site scripting-lik...

Prevent JavaScript injection in Operations Manager 2016 web console

Prevent JavaScript injection in Operations Manager 2016 web console Problem description Missing input validation and output encoding allows JavaScript injection, leading to Reflected Cross Site Scripting XSS. Reflected Cross Site Scripting may be used to inject arbitrary JavaScript to the Microso...

Important: Red Hat Security Advisory: ipmitool security update

An update for ipmitool is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...