Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks 1. Go to to Quizzes & Surveys 2. Add/edit a...

AZL-62420 CVE-2024-5171 affecting package libao 1.2.0-24

Integer overflow in libaom internal function imgallochelper can lead to heap buffer overflow. This function can be reached via 3 callers: Calling aomimgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and so...

CVE-2024-29829

creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...

CVE-2023-38042

creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...

CVE-2024-29828

creationtimestamp| type| source ---|---|--- 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...

CVE-2024-29825

creationtimestamp| type| source ---|---|--- 2024-05-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1300 2024-05-24 23:27:46+00:00| seen| https://t.me/itsecnews/4463...

python27:2.7 security update

babel 2.5.1-10 - Fix CVE-2021-20095 Resolves: rhbz1955615 2.5.1-9 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 2.5.1-8 - Fix unversioned requires/buildrequires - Resolves: rhbz1628242 2.5.1-7 - Remove unversioned binaries - Resolves: rhbz1613343 2.5.1-6 - Make...

WordPress Email Log Plugin <= 2.4.8 is vulnerable to Other Vulnerability Type

Software Email Log Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A3: Injection Classification Other Vulnerability Type CVE CVE-2024-0867 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 7750b3ba7ece Credits Sean Murphy Required privilege...

WordPress Similarity Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software Similarity Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3972 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3941fac517e1 Credits Bob Matyas Required privilege...

Fortinet Fortigate Node.js crash over administrative interface (FG-IR-24-017)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-017 advisory. - An improper check or handling of exceptional conditions vulnerability CWE-703 in Fortinet FortiOS version 7.4.1 allows an...

Migration Backup Restore < 3.5.0 - Admin+ SSRF

Description The plugin does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations. 1. Click on "Upload Backup" and add http://127.0.0.1:XXX/123.wpstg - "Upload". If the port is open it will return an error "Not Found...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Stack-based Buffer Overflow (CVE-2023-5401)

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. 'Red Hat Product Security has rated this update a...

CVE-2018-19933

creationtimestamp| type| source ---|---|--- 2024-04-24 22:08:17+00:00| seen| https://t.me/arpsyndicate/4830...

CVE-2023-4973

creationtimestamp| type| source ---|---|--- 2024-04-24 21:09:33+00:00| seen| Telegram/fQCkwzbJbLvewLQiHGCsWuoLqUk9GJHitjci5ogOBDUTag...

CVE-2018-7274

creationtimestamp| type| source ---|---|--- 2024-04-24 21:04:11+00:00| seen| https://t.me/arpsyndicate/4818...

CVE-2024-31804

creationtimestamp| type| source ---|---|--- 2024-04-24 20:49:03+00:00| seen| https://t.me/arpsyndicate/4815...

CVE-2017-6929

creationtimestamp| type| source ---|---|--- 2024-04-24 19:57:32+00:00| seen| https://t.me/arpsyndicate/4807...

haithabu.de Cross Site Scripting vulnerability OBB-3921757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heraldrysinstitute.com Cross Site Scripting vulnerability OBB-3921704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...