429 matches found
WordPress my depressive theme <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme my depressive versions = 2.0.7...
CVE-2025-22345 WordPress TS Comfort DB plugin <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...
PT-2024-13481 · Betterlinks · Wpdeveloper Simple 301 Redirects
Name of the Vulnerable Software and Affected Versions: WPDeveloper Simple 301 Redirects by BetterLinks versions 2.0.7 and earlier Description: The issue affects the access control security levels in WPDeveloper Simple 301 Redirects by BetterLinks, allowing exploitation due to missing authorizatio...
WordPress Splash Sync plugin <= 2.0.7 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Splash Sync versions = 2.0.7...
WordPress plugin Goodlayers Core 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2024-30308 · Unknown · Typesquare Webfonts
Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...
http-proxy-middleware 安全漏洞
http-proxy-middleware is Node.js http proxy middleware for connect, express, next.js, and more. A security vulnerability exists in http-proxy-middleware versions prior to 2.0.7 and versions 3.0.0 through 3.0.3. An attacker exploiting this vulnerability could cause a system crash...
JVN#57285747: N-LINE vulnerable to HTML injection
N-LINE provided by NEUMANN CO.LTD. is an online learning management system for driving schools. N-LINE processes inputs with insufficient check CWE-94, and malicious inputs from an student's device may badly impact the instructor's screen. Impact Arbitrary code may be executed on the instructor's...
PT-2024-33214 · Giant Manufacturing Co. · Ridelink
Name of the Vulnerable Software and Affected Versions: GIANT MANUFACTURING CO., LTD RideLink version 2.0.7 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 2.0.7, at the moment, there is no information...
CVE-2024-41570
An Unauthenticated Server-Side Request Forgery SSRF in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server...
CVE-2024-41570
An Unauthenticated Server-Side Request Forgery SSRF in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server...
WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin TypeSquare Webfonts versions = 2.0.7...
CVE-2015-9251 affecting package slf4j for versions less than 2.0.7-1
CVE-2015-9251 affecting package slf4j for versions less than 2.0.7-1. An upgraded version of the package is available that resolves this issue...
WordPress Funnel Builder by CartFlows Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Funnel Builder by CartFlows Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4632 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID eaec7f3b2d17 Credits wesley wcraf...
SUSE CVE-2024-28176
jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens JWT, JSON Web Signature JWS, JSON Web Encryption JWE, JSON Web Key JWK, JSON Web Key Set JWKS, and more. A vulnerability has been identified in the JSON Web Encryption JWE decryption interfaces...
Fluent Bit 安全漏洞
Fluent Bit is an open source log processing and analysis system written in C. A security vulnerability exists in Fluent Bit versions 2.0.7 through 3.0.3, which stems from a security issue in the parsing of trace requests by the http server that could lead to a denial of service condition,...
WordPress Plugin Getwid 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rack-2.0.7.gem
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of rack-2.0.7.gem Vulnerability Details CVEID:CVE-2024-26146 DESCRIPTION: Rack is vulnerable to a denial of service, caused by improper validation of user-supplied input by the header parsing process. By sending...
WordPress Getwid – Gutenberg Blocks Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Getwid – Gutenberg Blocks Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3588 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9599eeb54223 Credits Webbernaut...
