30 matches found
CVE-2025-13704
creationtimestamp| type| source ---|---|--- 2026-01-09 13:04:47+00:00| seen| Telegram/Q6W0k1WKh9B3-4oN0DiaBhUByTzqYQ-BzTWUpEPQoF3Zxk 2026-01-09 13:27:30+00:00| seen| https://gist.github.com/Darkcrai86/1331776c53ad6518bf921578dab0c3d4 2026-01-09 15:11:46+00:00| seen|...
CVE-2024-13704
The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stusertitle' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2024-13704
creationtimestamp| type| source ---|---|--- 2025-02-18 08:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligszswqcw2g 2025-02-18 08:41:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4767 2025-02-18 10:57:43+00:00| seen| https://t.me/cvedetector/18305...
CVE-2024-13704 Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting
The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stusertitle' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
CVE-2024-13704
CVE-2024-13704 relates to the WordPress plugin Super Testimonials (also listed in Wordfence). It is a stored cross-site scripting (XSS) vulnerability via the st_user_title parameter in all versions up to 4.0.1, caused by insufficient input sanitization and output escaping. The impact is unauthent...
CVE-2019-13704
creationtimestamp| type| source ---|---|--- 2024-02-27 11:16:37+00:00| seen| https://t.me/ctinow/194232...
BELL-CVE-2017-13704 CVE-2017-13704 does not affect BellSoft software
Bulletin has no description...
Mageia: Security Advisory (MGASA-2017-0364)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0367)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for chromium, re2 (important)
openSUSE Security Update: Security update for chromium, re2 Announcement ID: openSUSE-SU-2020:0010-1 Rating: important References: 1154806 Cross-References: CVE-2019-13699 CVE-2019-13700 CVE-2019-13701 CVE-2019-13702 CVE-2019-13703 CVE-2019-13704 CVE-2019-13705 CVE-2019-13706 CVE-2019-13707...
DEBIAN-CVE-2019-13704
Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page...
CVE-2019-13704
CVE-2019-13704 affects Google Chrome/Chromium before 78.0.3904.70 and is described as an access restriction bypass via CSP, specifically a Content Security Policy bypass. Connected advisories confirm the issue as a CSP bypass vulnerability in Chromium/Chrome, with remediation guidance to upgrade ...
RHEL 6 : chromium-browser (RHSA-2019:3759)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3759 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 78.0.3904.70. Security Fixes:...
Important: Red Hat Security Advisory: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2019-13704
Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 78 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 78.0.3904.70 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...
countylinemagazine.com Cross Site Scripting vulnerability
Security Researcher Kaushik49617036 Helped patch 0 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting countylinemagazine.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard,...
CVE-2018-13704
The mintToken function of a smart contract implementation for eddToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
CVE-2018-13704
The CVE-2018-13704 entry concerns a mintToken integer overflow in the eddToken Ethereum smart contract. The vulnerability allows the contract owner to arbitrarily set any user’s balance to a chosen value, indicating a critical flaw in balance management. Concrete details available in connected so...
Fedora 27 : dnsmasq (2017-274d763ed8)
Fixes CVE-2017-13704 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...