CVE-2020-2584

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5992...

CVE-2019-2584

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5990...

WordPress PixelYourSite Plugin < 9.3.7 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pixelyoursite:pixelyoursite"; if description...

AlmaLinux 8 : ruby:2.7 (ALSA-2021:2584)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:2584 advisory. ruby: Potential HTTP request smuggling in WEBrick CVE-2020-25613 ruby: XML round-trip vulnerability in REXML CVE-2021-28965 Tenable has extracted the...

WordPress PixelYourSite PRO Plugin < 9.6.2 is vulnerable to Cross Site Scripting (XSS)

Software PixelYourSite PRO Type Plugin Vulnerable versions 9.6.2 Fixed in 9.6.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2584 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 95abbc665cdf Credits Marco Wotschka Required...

CVE-2023-2584 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 9.6.1 in the Pro version due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-2584 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 9.6.1 in the Pro version due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-2584

PixelYourSite WordPress plugin (and PixelYourSite Pro) is affected by a Stored Cross-Site Scripting (XSS) flaw due to insufficient input sanitization and output escaping in admin settings. The vulnerability affects versions up to 9.3.6 (9.6.1 Pro) and can be exploited by an authenticated admin or...

WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.6 is vulnerable to Cross Site Scripting (XSS)

Software PixelYourSite – Your smart PIXEL TAG Manager Type Plugin Vulnerable versions = 9.3.6 Fixed in 9.3.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2584 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d84d11fc00c3...

CVE-2022-2584

creationtimestamp| type| source ---|---|--- 2022-12-29 08:18:38+00:00| seen| https://t.me/cibsecurity/55441...

CVE-2022-2584

The dag-pb codec can panic when decoding invalid blocks...

CVE-2022-2584 Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

The dag-pb codec can panic when decoding invalid blocks...

CVE-2022-2584 Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

The dag-pb codec can panic when decoding invalid blocks...

CVE-2022-2584 Panic when decoding invalid blocks in github.com/ipld/go-codec-dagpb

The dag-pb codec can panic when decoding invalid blocks...

CVE-2022-2584

CVE-2022-2584 affects go-codec-dagpb (github.com/ipld/go-codec-dagpb). The dag-pb codec can panic when decoding invalid blocks, causing a potential DoS by crashing the application. The issue has been patched in version 1.3.1. Embed: affected component is the dag-pb codec; root cause is panic on i...

Oracle Linux 8 : ruby:2.7 (ELSA-2021-2584)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2584 advisory. ruby 2.7.3-136 - Upgrade to Ruby 2.7.3. Resolves: rhbz1951999 - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address contains...

SUSE: Security Advisory (SUSE-SU-2017:0575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : mysql:8.0 (CESA-2020:3732)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3732 advisory. - mysql: Information Schema unspecified vulnerability CPU Oct 2019 CVE-2019-2911 - mysql: Server: Security: Encryption unspecified vulnerability CPU Oc...

Important: Red Hat Security Advisory: mysql:8.0 security update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...