OPENSUSE-SU-2024:14578-1 gstreamer-plugins-good-1.24.10-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-good-1.24.10-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2024-17227 · WordPress · Responsive Video

Name of the Vulnerable Software and Affected Versions: Responsive Videos plugin for WordPress versions up to, and including, 2.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'somryv' shortcode due to insufficient input sanitization and output escaping on...

WordPress Responsive Videos plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Responsive Videos versions = 2.1...

CVE-2024-53753

Cross-Site Request Forgery CSRF vulnerability in CultBooking CultBooking Hotel Booking Engine cultbooking-booking-engine allows Stored XSS.This issue affects CultBooking Hotel Booking Engine: from n/a through = 2.1...

WordPress plugin CultBooking Hotel Booking Engine 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

OPENSUSE-SU-2024:14524-1 rclone-1.68.2-2.1 on GA media

These are all security issues fixed in the rclone-1.68.2-2.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 39 Update: microcode_ctl-2.1-58.5.fc39

The microcodectl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode...

CVE-2024-51879

CVE-2024-51879 is a Stored XSS in the WordPress Text Advertisements plugin by Arash Heidari, affecting versions n/a through 2.1. The vulnerability arises from improper input neutralization during web page generation. CVSS 3.1 base score 6.5 (Medium); exploitation status not indicated in the provi...

PT-2024-35009 · Unknown · Arash Heidari Text Advertisements

Name of the Vulnerable Software and Affected Versions: Arash Heidari Text Advertisements versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

openexr security update

3.1.1-2.1 - fix CVE-2023-5481 RHEL-64162...

PT-2024-35269 · Anton Hoelstad · Wp Quick Setup

Name of the Vulnerable Software and Affected Versions: Anton Hoelstad WP Quick Setup versions 2.0 and earlier Description: The issue allows an attacker to upload a web shell to a web server, potentially leading to unauthorized access. This is due to an unrestricted upload of file with dangerous...

Advisory ROSA-SA-2024-2520

Software: device-mapper-multipath 0.8.4 OS: ROSA Virtualization 2.1 packageevrstring: device-mapper-multipath-0.8.4-22 CVE-ID: CVE-2022-41974 BDU-ID: 2022-06669 CVE-Crit: HIGH CVE-DESC.: A vulnerability in multipath-tools multipath-tools driver management software is related to privilege manageme...

CVE-2024-44233

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected...

CVE-2024-44232

CVE-2024-44232: Apple platforms (macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1; iOS 18.1 and iPadOS 18.1) fixed by improved bounds checks. Parsing a malicious video file may cause an unexpected system termination. Remediation is to ...

CVE-2024-49637

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Foxskav Bet WC 2018 Russia allows Reflected XSS.This issue affects Bet WC 2018 Russia: from n/a through 2.1...

CVE-2024-49656

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Abdullah Irfan DocumentPress allows Reflected XSS.This issue affects DocumentPress: from n/a through 2.1...

PT-2024-33607 · Unknown · Documentpress

Name of the Vulnerable Software and Affected Versions: DocumentPress versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...

WordPress plugin Bet WC 2018 Russia 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2024-33591 · Unknown · Foxskav Bet Wc 2018 Russia

Name of the Vulnerable Software and Affected Versions: Foxskav Bet WC 2018 Russia versions n/a through 2.1 Description: The issue affects Foxskav Bet WC 2018 Russia, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations: For versions n/a...

WordPress plugin DocumentPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...