906 matches found
CVE-2023-32744
Cross-Site Request Forgery CSRF vulnerability in WooCommerce Product Recommendations plugin = 2.3.0 versions...
CVE-2023-32744 WordPress WooCommerce Product Recommendations plugin < 2.3.0 - Cross Site Request Forgery (CSRF) vulnerability
A vulnerability in Woo WooCommerce Product Recommendations woocommerce-product-recommendations.This issue affects WooCommerce Product Recommendations: from n/a through 2.3.0...
PT-2023-23992 · WordPress · Woocommerce Product Recommendations
Name of the Vulnerable Software and Affected Versions: WooCommerce Product Recommendations plugin versions = 2.3.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions...
Design/Logic Flaw
PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to PILOS users...
CVE-2023-47107 PILOS account takeover through password reset poisoning
PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to PILOS users...
CVE-2023-47107
Summary of mode C (concrete details): PILOS, the BigBlueButton front-end, has a vulnerability in its password reset flow where the reset URL is built using the request host header. An attacker could lure affected users to a URL that points to the attacker’s server, potentially disclosing the pass...
PT-2023-30313 · Pilos · Pilos
Name of the Vulnerable Software and Affected Versions: PILOS versions prior to 2.3.0 Description: The password reset component in PILOS uses the hostname supplied within the request host header when building a password reset URL. This could allow manipulation of the URL sent to PILOS users,...
CVE-2023-5998
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV...
CVE-2023-5998
CVE-2023-5998 affects the gpac/gpac project (multimedia framework) with an Out-of-bounds Read vulnerability reported for builds prior to 2.3.0-DEV. The connected documents confirm the affected product/version and the issue type, but do not provide a remediation, patch version, or exploit details....
WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Pinyin Slugs Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-47511 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1f3f38b0df7f Credits yuyudhn Required privilege...
GPAC Buffer Error Vulnerability
GPAC is an open source multimedia framework. A buffer error vulnerability exists in versions prior to GPAC v.2.3.0-DEV that stems from the presence of out-of-bounds reads...
PT-2023-32466 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: The issue is related to an out-of-bounds read in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3.0-DEV, update to version 2.3.0-DEV or later to resolve the issue...
BIT-NGINX-INGRESS-CONTROLLER-2022-30535
In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
BIT-2020-15196
In Tensorflow version 2.3.0, the SparseCountSparseOutput and RaggedCountSparseOutput implementations don't validate that the weights tensor has the same shape as the data. The check exists for DenseCountSparseOutput, where both tensors are fully specified. In the sparse and ragged count weights a...
com.cybersource:cybersource-sdk-java (>=6.2.12 <=6.2.13), com.github.zuinnote:hadoopoffice-flinkts_2.11 (>=1.6.3 <=1.6.4) +363 more potentially affected by CVE-2023-44483 via org.apache.santuario:xmlsec (>=2.3.0 <=2.3.3)
org.apache.santuario:xmlsec MAVEN version =2.3.0, =6.2.12, =1.6.3, =1.6.3, =1.6.3, =1.6.3, =2.1.0, =6.0.0, =5.1.4, =2021.11.24, =2021.11.24, =2021.11.24, =2021.11.24, =2021.11.24, =0.2.1, =0.2.15 and more Source cves: CVE-2023-44483 Source advisory: OSV:GHSA-XFRJ-6VVC-3XM2...
OESA-2023-1743 libcue security update
Libcue is intended for parsing a so-called cue sheet from a char string or a file pointer. For handling of the parsed data a convenient API is available. Security Fixes: libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bound...
CVE-2023-5595
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...
Denial of service
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV...