17 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-23996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could...
CVE-2023-23996
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...
ROS-2-657
2.657 Multiple vulnerabilities in Mozilla Firefox CVE-2021-23994, CVE-2021-23995, CVE-2021-23996, CVE-2021-23997, CVE-2021-23998, CVE-2021-23999, CVE-2021-24000, CVE-2021-24001, CVE-2021-24002, CVE-2021-29945, CVE-2021-29947, CVE-2021-29946. 1. Vulnerability Description: Vulnerabilities allow a...
CVE-2025-23996 WordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in AnyRoad AnyRoad anyguide allows Cross Site Request Forgery.This issue affects AnyRoad: from n/a through = 1.3.2...
CVE-2025-23996 WordPress AnyRoad plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in AnyRoad AnyRoad anyguide allows Cross Site Request Forgery.This issue affects AnyRoad: from n/a through = 1.3.2...
CVE-2025-23996
CVE-2025-23996 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress AnyRoad plugin (AnyRoad) affecting versions up to 1.3.2. The connected sources consistently state the issue as CSRF and identify the affected range as “from n/a through 1.3.2.” No exploit details or specif...
WordPress ProfilePress Plugin < 4.5.4 Multiple XSS Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:properfraction:profilepress"; if description...
CVE-2023-23996
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ProfilePress Membership Team ProfilePress plugin = 4.5.3 versions...
CVE-2023-23996
CVE-2023-23996 affects the WordPress ProfilePress Plugin (ProfilePress Membership Team ProfilePress)
SUSE CVE-2021-23996
By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...
WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)
Software ProfilePress Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23996 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8fffbd3790ea Credits Rio Darmawan Required...
CVE-2022-23996
CVE-2022-23996 concerns an unprotected component vulnerability in the Wear OS 3.0 component named StTheaterModeReceiver . The issue, present before the firmware update in Feb-2022, allows untrusted applications to enable bedtime mode without proper permission. Affected platform: Wear OS 3.0. Root...
CVE-2021-23996
CVE-2021-23996 affects Mozilla Firefox prior to 88.0, where a flaw in rendering with 3D CSS and JavaScript could cause content to appear outside the viewport, enabling spoofing potentially for phishing. Multiple connected advisories (Arch Linux ASA-202104-3, Alpine, CNVD/CNNVD entries, Kaspersky,...
USN-4926-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, trick the user into disclosing confidential...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-4926-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4926-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker...
UBUNTU-CVE-2021-23996
By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...
CVE-2021-23996
By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...