WordPress plugin Smart Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Fedora: Security Advisory (FEDORA-2024-08a6626c11)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-45003)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45003 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode l...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46810)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46810 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Check if fully...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46807)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46807 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: Check tbo resource point...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44966)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44966 advisory. - In the Linux kernel, the following vulnerability has been resolved: binfmtflat: Fix corruption when not...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46819)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46819 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing ob...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46814)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46814 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msgid before...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44982)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44982 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46804)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46804 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add array index check f...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46832)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46832 advisory. - In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k: Don't call getc0comparei...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44988)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44988 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44965)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44965 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pticlonepgtable alignment...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46818)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46818 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check gpioid before use...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-44958)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44958 advisory. - In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance schedsmtpresent...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-46840)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46840 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == ...

WordPress Unlimited Addon For Elementor plugin <=2.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Unlimited Addon For Elementor versions = 2.0.0...

WordPress Order Attachments for WooCommerce plugin 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload vulnerability

WordPress Order Attachments for WooCommerce plugin 2.0 - 2.4.1 - Missing Authorization to Authenticated Subscriber+ Limited Arbitrary File Upload vulnerability discovered by luckynoob in WordPress Plugin Order Attachments for WooCommerce versions 2.0 - 2.4.1...

PT-2024-41103 · Ооо 'Аспро' · Аспро: Digital 2.0 +14

Уязвимость функции unserialize платформ управления содержимым сайта Аспро связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с помощью специально сформированного POST-запроса...

WordPress Smart Blocks Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software Smart Blocks Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49270 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fc8a42cfb8ae Credits João Pedro S Alcântara Kinorth Required...