1397 matches found
RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4410)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4410 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...
RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4408)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4408 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...
WordPress Change Price Title for WooCommerce Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)
Software Change Price Title for WooCommerce Type Plugin Vulnerable versions = 2.3 Fixed in 2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 363a9547c8ad Credits Rafie Muhammad...
CVE-2023-37767
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BMParseIndexValueReplace function at /lib/libgpac.so...
Design/Logic Flaw
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...
UBUNTU-CVE-2023-37174
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...
Cross site scripting
A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...
CVE-2023-3535 SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting
A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...
CVE-2023-3535
The CVE-2023-3535 issue affects SimplePHPscripts FAQ Script PHP 2.3, where the vulnerability exists in the /preview.php file of the URL Parameter Handler. Argument manipulation can trigger cross-site scripting (XSS) and can be exploited remotely over the network. The connected sources consistentl...
SimplePHPscripts FAQ Script PHP 跨站脚本漏洞
SimplePHPscripts FAQ Script PHP is a FAQ system from SimplePHPscripts open source. SimplePHPscripts FAQ Script PHP version 2.3 has a cross-site scripting vulnerability , the vulnerability stems from a problem with the file /preview.php , which can lead to cross-site scripting...
osslsigncode 安全漏洞
osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...
FAQ Script 2.3 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
PT-2023-24937 · Aeotec · Aeotec Wallmote Switch
Name of the Vulnerable Software and Affected Versions: Aeotec WallMote Switch version 2.3 Description: A vulnerability in the Aeotec WallMote Switch allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message. Recommendations: For Aeotec WallMote Switch version 2.3, at the...
CVE-2020-21366
GreenCMS v2.3 is affected by a Cross-Site Request Forgery vulnerability that lets an attacker gain privileges via the adduser function in index.php. Root cause appears to be CSRF in the user-creation flow; CVSS v3.1 base score 8.0 (HIGH) with network attack vector, low complexity and user interac...
CVE-2020-21366
Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php...
samba security, bug fix, and enhancement update
evolution-mapi 3.40.1-5 - Related: 2131993 Rebuild against samba 4.17 openchange 2.3-40 - Related: 2131993 Rebuild against samba 4.17 samba 4.17.5-102.0.1 - Fix memleak in nsswinbindinitgroupsdyn Orabug: 34994509 4.17.5-102 - resolves: rhbz2169980 - Fix winbind memory leak - resolves: rhbz2156056...
Design/Logic Flaw
AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request...
USN-6055-2 ruby2.3, ruby2.5, ruby2.7 regression
USN-6055-1 fixed a vulnerability in Ruby. Unfortunately it introduced a regression. This update reverts the patches applied to CVE-2023-28755 in order to fix the regression pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby...
Security Bulletin: Vulnerability Identified in Cloud Pak System (CVE-2020-4914)
Summary Invalidate session vulnerability identified in IBM Cloud Pak System UI and Rest API at logout. IBM Cloud Pak System has addressed vulnerability. Vulnerability Details CVEID:CVE-2020-4914 DESCRIPTION: IBM Cloud Pak System does not invalidate session after logout which could allow a local...