CVE-2023-1546

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2023-1546 MyCryptoCheckout < 2.124 - Reflected XSS

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting...

CVE-2023-1546

CVE-2023-1546 affects the WordPress plugin MyCryptoCheckout prior to version 2.124. The issue is a Reflected Cross-Site Scripting caused by not escaping certain URLs output in HTML attributes. The NVD entry and the Nuclei template confirm this cross-site scripting flaw, with a CVSS v3.1 base scor...

WordPress MyCryptoCheckout Plugin < 2.124 is vulnerable to Cross Site Scripting (XSS)

Software MyCryptoCheckout Type Plugin Vulnerable versions 2.124 Fixed in 2.124 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1546 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b58e27663e61 Credits Pablo Sanchez Required...

K12254802: Apache httpd HTTP/2 vulnerability CVE-2016-1546

Security Advisory Description The Apache HTTP Server 2.4.17 and 2.4.18, when modhttp2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service stream-processing outage via modified flow-control...

CVE-2022-1546

creationtimestamp| type| source ---|---|--- 2022-07-11 16:19:20+00:00| seen| https://t.me/cibsecurity/45913...

CVE-2022-1546

CVE-2022-1546 affects the WordPress plugin WooCommerce - Product Importer (≤ 1.5.2). The vulnerability arises because imported data is not sanitized/escaped before it is output on the page, enabling a Reflected Cross-Site Scripting attack. The issue is triggered via the admin CSV import workflow ...

Rocky Linux 8 : polkit (RLSA-2022:1546)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1546 advisory. - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from thi...

Oracle Linux 8 : polkit (ELSA-2022-1546)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1546 advisory. 0.115-13.0.1.el85.2 - Increase timeout to avoid defunct processes Orabug: 26930744 0.115-13.el85.2 - necessary version bump due to build versioning - Resolves:...

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2022-1546)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0349)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : tomcat8 (ALAS-2021-1546)

The version of tomcat8 installed on the remote host is prior to 8.5.72-1.89. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1546 advisory. A memory leak flaw was found in Apache Tomcat, where an HTTP upgrade connection does not release for WebSocket connections once...

CVE-2021-1546

creationtimestamp| type| source ---|---|--- 2021-09-23 07:29:36+00:00| seen| https://t.me/cibsecurity/29263...

CVE-2021-1546 Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an...

CVE-2021-1546 Cisco SD-WAN Software Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an...

CVE-2021-1546

CVE-2021-1546 is a Cisco SD-WAN Software CLI information-disclosure vulnerability. The issue stems from improper protections on file access through the CLI, allowing an authenticated, local attacker to run a CLI command that targets an arbitrary local file and potentially read portions of that fi...

Apache Struts Security Update (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)

Apache Struts is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Apache Struts XSS Vulnerability (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)

Apache Struts is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

SUSE: Security Advisory (SUSE-SU-2020:1546-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple vulnerabilities in Rational DOORS Next Generation with potential for Cross-Site Scripting attack

Summary Multiple vulnerabilities in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2017-1593 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...