WordPress Change Price Title for WooCommerce Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

Software Change Price Title for WooCommerce Type Plugin Vulnerable versions = 2.3 Fixed in 2.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 363a9547c8ad Credits Rafie Muhammad...

CVE-2023-37767

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BMParseIndexValueReplace function at /lib/libgpac.so...

Design/Logic Flaw

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

UBUNTU-CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

Cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

CVE-2023-3535

The CVE-2023-3535 issue affects SimplePHPscripts FAQ Script PHP 2.3, where the vulnerability exists in the /preview.php file of the URL Parameter Handler. Argument manipulation can trigger cross-site scripting (XSS) and can be exploited remotely over the network. The connected sources consistentl...

CVE-2023-3535 SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting

A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be...

SimplePHPscripts FAQ Script PHP 跨站脚本漏洞

SimplePHPscripts FAQ Script PHP is a FAQ system from SimplePHPscripts open source. SimplePHPscripts FAQ Script PHP version 2.3 has a cross-site scripting vulnerability , the vulnerability stems from a problem with the file /preview.php , which can lead to cross-site scripting...

osslsigncode 安全漏洞

osslsigncode is a small tool by Michał Trojnara, a personal developer. It implements part of the functionality of the Microsoft tool signtool.exe. A security vulnerability exists in osslsigncode v.2.3 and earlier versions, which stems from the presence of a buffer overflow vulnerability that coul...

FAQ Script 2.3 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

PT-2023-24937 · Aeotec · Aeotec Wallmote Switch

Name of the Vulnerable Software and Affected Versions: Aeotec WallMote Switch version 2.3 Description: A vulnerability in the Aeotec WallMote Switch allows attackers to cause a Denial of Service DoS via a crafted Z-Wave message. Recommendations: For Aeotec WallMote Switch version 2.3, at the...

CVE-2020-21366

Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser function of index.php...

CVE-2020-21366

GreenCMS v2.3 is affected by a Cross-Site Request Forgery vulnerability that lets an attacker gain privileges via the adduser function in index.php. Root cause appears to be CSRF in the user-creation flow; CVSS v3.1 base score 8.0 (HIGH) with network attack vector, low complexity and user interac...

samba security, bug fix, and enhancement update

evolution-mapi 3.40.1-5 - Related: 2131993 Rebuild against samba 4.17 openchange 2.3-40 - Related: 2131993 Rebuild against samba 4.17 samba 4.17.5-102.0.1 - Fix memleak in nsswinbindinitgroupsdyn Orabug: 34994509 4.17.5-102 - resolves: rhbz2169980 - Fix winbind memory leak - resolves: rhbz2156056...

Design/Logic Flaw

AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request...

USN-6055-2 ruby2.3, ruby2.5, ruby2.7 regression

USN-6055-1 fixed a vulnerability in Ruby. Unfortunately it introduced a regression. This update reverts the patches applied to CVE-2023-28755 in order to fix the regression pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby...

Security Bulletin: Vulnerability Identified in Cloud Pak System (CVE-2020-4914)

Summary Invalidate session vulnerability identified in IBM Cloud Pak System UI and Rest API at logout. IBM Cloud Pak System has addressed vulnerability. Vulnerability Details CVEID:CVE-2020-4914 DESCRIPTION: IBM Cloud Pak System does not invalidate session after logout which could allow a local...

Unrestricted file upload

File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type parameter...

CVE-2020-19803

Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background system settings...

PT-2023-11536 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the background system settings. Recommendations: For Milken DoyoCMS version 2.3, update to a version that includ...