138 matches found
Webcam redirection in double hop is not working
Webcam is not working anymore in a double hop scenario. If the first hop VDA is 1912CU3 webcam redirects fine. However if first hop VDA is CVAD 1912 CU8 VDA then webcam redirection fails. With https://webcamtests.com/ when clicking on "Test my cam" an error is seen. "Your webcam is being used or...
Oracle Linux 8 : bluez (ELSA-2020-1912)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1912 advisory. 5.50-3 + bluez-5.50-3 - Bump the version 5.50-2 + bluez-5.50-2 - Fixing CVE-2018-10910 1606373 Tenable has extracted the preceding description block directly fr...
WordPress Limit Login Attempts 1.7.1 Cross Site Scripting
On January 26, 2023, the Wordfence team responsibly disclosed an unauthenticated stored Cross-Site Scripting vulnerability in Limit Login Attempts, a WordPress plugin installed on over 600,000 sites that provides site owners with the ability to block IP addresses that have made repeated failed...
WordPress Limit Login Attempts 1.7.1 Cross Site Scripting Vulnerability
WordPress Limit Login Attempts plugin versions 1.7.1 and below suffer from a persistent cross site scripting vulnerability. On January 26, 2023, the Wordfence team responsibly disclosed an unauthenticated stored Cross-Site Scripting vulnerability in Limit Login Attempts, a WordPress plugin...
Update Now! Severe Vulnerability Impacting 600,000 Sites Patched in Limit Login Attempts
On January 26, 2023, the Wordfence team responsibly disclosed an unauthenticated stored Cross-Site Scripting vulnerability in Limit Login Attempts, a WordPress plugin installed on over 600,000 sites that provides site owners with the ability to block IP addresses that have made repeated failed...
WordPress Limit Login Attempts Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)
Software Limit Login Attempts Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1912 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 8be93eea7b1c Credits Marco Wotschka...
CVE-2023-1912
creationtimestamp| type| source ---|---|--- 2023-04-06 18:27:03+00:00| seen| https://t.me/cibsecurity/61555...
CVE-2023-1912
The CVE-2023-1912 entry concerns the WordPress plugin Limit Login Attempts . It describes a Stored Cross-Site Scripting (XSS) vulnerability in versions up to and including 1.7.1, caused by insufficient input sanitization and output escaping in the lock-logging feature. The flaw can allow unauthen...
Amazon Linux 2 : vim (ALAS-2023-1912)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1912 advisory. The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap...
Server communication timeout error while accessing the vdisk pool after upgrade to 1912 CU5
'Server communication timeout' error while accessing the vdisk pool node in the Citrix Provisioning PVS console after upgrade to 1912 CU5' There were no issues with the other nodes in the PVS Console...
CVE-2022-1912
creationtimestamp| type| source ---|---|--- 2022-07-18 20:39:53+00:00| seen| https://t.me/cibsecurity/46479...
CVE-2022-1912
The CVE-2022-1912 entry concerns the WordPress plugin Button Widget Smartsoft, affecting versions up to and including 1.0.1. The underlying issue is missing nonce validation on the smartsoftbutton_settings page, enabling CSRF. This allows unauthenticated attackers to update the plugin’s settings ...
@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1912 via hermes-engine (>=0.0.0, <=0.5.1)
hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1912 Source advisory: OSV:GHSA-PF27-929J-9PMM...
CVE-2022-27503
Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...
CVE-2022-27503
Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...
Mageia: Security Advisory (MGASA-2014-0085)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1912
creationtimestamp| type| source ---|---|--- 2021-11-12 12:38:47+00:00| seen| https://t.me/cibsecurity/32283...
CVE-2021-1912
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-1912
The CVE-2021-1912 issue concerns Qualcomm Snapdragon firmware across Snapdragon Auto, Compute, Connectivity, Industrial IOT and Mobile families. A root cause is an integer overflow caused by an improper length check when computing count and grace period. Affected components are within the Snapdra...