CVE-2024-23807

The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via...

CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan

The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via...

CVE-2024-23807 Apache Xerces C++: Use-after-free on external DTD scan

The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via...

CVE-2024-23807

CVE-2024-23807 affects the Apache Xerces-C++ XML parser (versions 3.0.0 up to, but not including, 3.2.5) due to a use-after-free when scanning external DTDs. Patched in 3.2.5; mitigations include disabling DTD processing (DOM: standard feature; SAX: XERCES_DISABLE_DTD). Connected documents corrob...

CVE-2024-23807

creationtimestamp| type| source ---|---|--- 2024-02-16 19:31:50+00:00| seen| https://t.me/ctinow/186591 2024-02-29 02:56:25+00:00| seen| https://t.me/ctinow/196112 2024-02-29 03:03:00+00:00| seen| https://t.me/ctinow/196129 2024-03-08 09:26:15+00:00| seen| https://t.me/ctinow/203164 2026-01-21...

CVE-2023-23807

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Qumos MojoPlug Slide Panel plugin = 1.1.2 versions...

CVE-2023-23807

CVE-2023-23807 affects MojoPlug Slide Panel (WordPress plugin) version

WordPress MojoPlug Slide Panel Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software MojoPlug Slide Panel Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23807 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a537c89d392b Credits Rio Darmawan Require...

openSUSE 15 Security Update : phpMyAdmin (openSUSE-SU-2023:0047-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0047-1 advisory. - PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lan...

Security Bulletin: A security vulnerability in Node.js jsonpointer affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js jsonpointer affects IBM Cloud Pak for Multicloud Management Managed Services Vulnerability Details CVEID:CVE-2021-23807 DESCRIPTION: Node.js jsonpointer module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype...

OESA-2022-1755 nodejs-jsonpointer security update

Simple JSON Addressing. Security Fixes: This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.CVE-2021-23807...

CVE-2022-23807

creationtimestamp| type| source ---|---|--- 2022-01-22 07:13:56+00:00| seen| https://t.me/cibsecurity/36090 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CVE-2022-23807

CVE-2022-23807 affects phpMyAdmin: authenticated users can bypass two-factor authentication for future logins. Affected versions are phpMyAdmin 4.9.x before 4.9.8 and 5.1.x before 5.1.2. Exploitation details are not provided beyond the 2FA bypass scenario in the sources. Remediation available in ...

CVE-2022-23807

An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances...

Security Bulletin: IBM App Connect Enterprise Certified Container may be affected by CVE-2021-23807

Summary IBM App Connect Enterprise Certified Container may be affected by a prototype polution vulnerability in jsonpointer due to CVE-2021-23807, that could allow a remote attacker to execute aritrary code or perform a denial of service attack Vulnerability Details CVEID: CVE-2021-23807...

Security Bulletin: A security vulnerability in Node.js jsonpointer module affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js jsonpointer module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2021-23807 DESCRIPTION: Node.js jsonpointer module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw in t...

CVE-2021-23807

creationtimestamp| type| source ---|---|--- 2021-11-03 21:23:18+00:00| seen| https://t.me/cibsecurity/31760 2025-03-06 02:16:32+00:00| seen| Telegram/gwpXKtQjj9LKZTGuXcBvwdwIOeCDUgnwFe5U5FzLnbJmg-Wu...

CVE-2021-23807

CVE-2021-23807 affects the jsonpointer package (pre-5.0.0). Description: a type confusion vulnerability can bypass a prior Prototype Pollution fix when pointer components are arrays, potentially enabling arbitrary code execution or denial of service via crafted inputs. Affected products/contexts ...