283 matches found
CVE-2023-0942
The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...
K16900: Multiple FreeType vulnerabilities
Security Advisory Description CVE-2014-9657 The ttfaceloadhdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted...
CVE-2023-0232
Summary: ShopLentor WordPress plugin < 2.5.4 is vulnerable to PHP Object Injection due to unserializing user-controlled cookie data used to track viewed products and user information. Root cause: unsafe unserialize of cookies in the plugin code. Impact: high Confidentiality/Integrity/Availabil...
WordPress plugin ShopLentor 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
WordPress WP Coder Plugin < 2.5.4 is vulnerable to SQL Injection
Software WP Coder Type Plugin Vulnerable versions 2.5.4 Fixed in 2.5.4 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-0895 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID af35ebdc8e18 Credits Etan Imanol Castro Aldrete Required privilege Administrator...
SUSE CVE-2014-8184
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable in liblouis. An attacker could create a malicious file that would cause applications that use liblouis such as Orca to crash, or potentially execute arbitrary code when opened...
SUSE CVE-2015-1872
The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted...
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0736
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
wallabag 跨站脚本漏洞
wallabag is a web application that allows you to save web pages for later reading. A cross-site scripting vulnerability exists in wallabag prior to version 2.5.4. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...
CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
PYSEC-2022-43008
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5...
PT-2022-28097 · Unknown · Heimdall Application Dashboard
Name of the Vulnerable Software and Affected Versions: Heimdall Application Dashboard versions 2.5.4 and earlier Description: The issue allows for reflected and stored Cross-Site Scripting XSS attacks via the Application name variable to the "Add application" page. The stored XSS will be triggere...
GHSA-639F-HXCV-84MC rdiffweb Open Redirect vulnerability
rdiffweb prior to version 2.5.4 has an Open Redirect vulnerability...
GHSA-85FP-523Q-5XWC rdiffweb vulnerable to Cross-Site Request Forgery
rdiffweb prior to version 2.5.4 is vulnerable to Cross-Site Request Forgery CSRF...
rdiffweb vulnerable to Cross-Site Request Forgery
rdiffweb prior to version 2.5.4 is vulnerable to Cross-Site Request Forgery CSRF...