58 matches found
WordPress All-in-One Addons for ElementorCWidgetKit Plugin Cross-Site Scripting Vulnerability
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress All-in-One Addons for ElementorCWidgetKit Plugin versions prior to 2.3.10. An attacker can exploit this vulnerability to launch a cross-site scripting attack...
WordPress All-in-One Addons for Elementor 跨站脚本漏洞
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress All-in-One Addons for ElementorCWidgetKit Plugin versions prior to 2.3.10. An attacker can exploit this vulnerability to launch a cross-site scripting attack...
Security Onion Solutions Security Onion Security Breaches
Security Onion Solutions Security Onion is an American Security Onion Solutions software for threat search, enterprise security monitoring and log management. The software supports Elasticsearch, Logstash, Kibana, Snort, Suricata, Bro, Wazuh, Sguil, Squit, NetworkMiner and many other security too...
Dovecot 2.3.0 < 2.3.10 Multiple Vulnerabilities
Dovecot is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Open-Xchange: Pre-auth Denial-of-Service in Dovecot RPA implementation
Hi, Dovecot security team. I am Orange from DEVCORE security team. We just did a little security audit on the authentication mechanism of Dovecot, and found a buffer over-read in RPA implementation. In the mech-rpa.c, the function rpareadbuffer doesn't check that the length could be zero, and pas...
Open-Xchange: Pre-auth buffer over-read in Dovecot NTLM implementation
Hi, Dovecot security team. I am Orange from DEVCORE security team. We just did a little security audit on the authentication mechanism of Dovecot, and found a buffer over-read in NTLM implementation. The structure of NTLM field is defined in ntlm-types.h c struct ntlmsspbuffer uint16t length; /...
WordPress wp-google-map-plugin plugin cross-site request forgery vulnerability (CNVD-2019-28881)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-google-map-plugin plugin is a Google Maps plugin used in it. A cross-site request forgery vulnerability exists in th...
PT-2019-7268 · WordPress · Wp-Google-Map-Plugin
Name of the Vulnerable Software and Affected Versions: wp-google-map-plugin versions prior to 2.3.10 Description: The issue concerns a CSRF vulnerability in the add/edit category feature of the wp-google-map-plugin plugin for WordPress. Recommendations: For versions prior to 2.3.10, update to...
CVE-2018-10310
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser...
PivotX CMS 2.3.10 Cross Site Request Forgery / Cross Site Scripting
" " " " "...
PivotX 2.3.10 Session Fixation / XSS / Code Execution
Vulnerability: Session Fixation, Reflected XSS, Code Execution Affected Software: PivotX http://pivotx.net/ Affected Version: 2.3.10 probably also prior versions Patched Version: 2.3.11 Risk: Medium-High Session Fixation ================ Risk ---- Medium; If victim clicks link and logs in, then a...
DSA-2722-1 openjdk-7 - several
Bulletin has no description...
Fedora 19 : java-1.7.0-openjdk-1.7.0.25-2.3.10.3.fc19 (2013-11257)
Updated to latest IcedTea7-forest 2.3.10 - arm tarball updated to 2.1.9 - build bumped to 25 - All full-paths now have arch - temporarly swithced to intree lcms as it have security fixes patch 500 - added GENSRCDIR='$PWD/generated.build' to be able to - removed buildrequires lcms2-devel - this...
CentOS 5 : java-1.7.0-openjdk (CESA-2013:0958)
Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Important: Red Hat Security Advisory: java-1.7.0-openjdk security update
Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update
Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Ruby on Rails Security Bypass Vulnerability (Nov 2010)
Ruby on Rails is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rubyonrails:rails";...
