Resque Cross-Site Scripting Vulnerability

Resque is a Redis-powered library open-sourced by Resque for creating background jobs, placing them on multiple queues and processing them later. A cross-site scripting vulnerability exists in versions of Resque prior to 2.2.1, which stems from vulnerability to reflective cross-site scripting XSS...

WordPress CURCY Plugin <= 2.2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software CURCY Type Plugin Vulnerable versions = 2.2.0.1 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50831 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5702a980d547 Credits LVT-tholv2k Required privilege Contributor...

PT-2023-31624 · Resque · Resque

Name of the Vulnerable Software and Affected Versions: Resque versions prior to 2.2.1 Description: The issue concerns a reflected XSS vulnerability in the resque-web component of the Resque library. Specifically, the vulnerability affects the following paths: "/failed/?class=alertdocument.cookie"...

CVE-2023-49165

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...

CVE-2023-49165 WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...

UBUNTU-CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-48930

xinhu xinhuoa 2.2.1 contains a File upload vulnerability...

PT-2023-31014 · Unknown · Xinhu Xinhuoa

Name of the Vulnerable Software and Affected Versions: xinhu xinhuoa version 2.2.1 Description: The issue is related to a File upload vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-48930

xinhu xinhuoa 2.2.1 contains a File upload vulnerability...

xinhu Security Breach

xinhu Xinhu is a free and open source office OA system by the individual developer of Rain Rock rainrocka. A security vulnerability exists in xinhu version 2.2.1, which stems from a file upload vulnerability...

CVE-2023-48930

The CVE-2023-48930 entry concerns xinhu xinhuoa v2.2.1, which is affected by a File upload vulnerability. The available documents identify the affected software and the vulnerability class but do not provide concrete exploit code, affected subsystems beyond the file upload flaw, root-cause detail...

VulnCheck KEV: CVE-2023-1177

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-48317

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Vatsa Display Custom Post allows Stored XSS.This issue affects Display Custom Post: from n/a through 2.2.1...

WordPress plugin Debug Log Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-32314 · WordPress · Debug Log Manager

Name of the Vulnerable Software and Affected Versions: Debug Log Manager plugin for WordPress versions up to, and including, 2.2.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the clear log function. This allows unauthenticated...

Authorization

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...

PT-2023-13655 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: Intel Battery Life Diagnostic Tool versions prior to 2.2.1 Description: The issue is related to improper access control in the Intel Battery Life Diagnostic Tool software. This may allow an authenticated user to potentially enable escalation ...

PT-2023-24872 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: Intel Battery Life Diagnostic Tool versions prior to 2.2.1 Description: The issue is related to an uncontrolled search path in the Intel Battery Life Diagnostic Tool software. This may allow an authenticated user to potentially enable...