15 matches found
CVE-2022-29171
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
CVE-2024-29171
Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...
CVE-2024-29171
creationtimestamp| type| source ---|---|--- 2025-02-12 01:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113988333529868632 2025-02-12 02:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhx44ccrub2g 2025-02-12 03:07:08+00:00| seen|...
CVE-2023-29171
Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...
CVE-2023-29171
CVE-2023-29171: Unauthenticated Reflected Cross-Site Scripting in the WordPress plugin Magic Post Thumbnail (versions
WordPress Magic Post Thumbnail Plugin <= 4.1.10 is vulnerable to Cross Site Scripting (XSS)
Software Magic Post Thumbnail Type Plugin Vulnerable versions = 4.1.10 Fixed in 4.1.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29171 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 44509f046b66 Credits minhtuanac...
CVE-2022-29171
creationtimestamp| type| source ---|---|--- 2022-05-06 07:22:07+00:00| seen| https://t.me/cibsecurity/42081...
CVE-2022-29171 Remote Code Execution in sourcegraph
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
CVE-2022-29171 Remote Code Execution in sourcegraph
Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site admins to specify a callsignCommand, which is used to obtain...
CVE-2022-29171
Sourcegraph ≤ 3.37.0 is vulnerable to Remote Code Execution in the gitserver service. The Gitolite code-host integration with Phabricator lets an administrator who can edit/add a Gitolite code-host and has admin access to Sourcegraph’s bundled Grafana instance modify the callsignCommand, which ca...
WordPress All In One WP Security & Firewall Plugin < 4.4.6 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113788";...
CVE-2020-29171
creationtimestamp| type| source ---|---|--- 2021-02-10 18:41:32+00:00| seen| https://t.me/cibsecurity/23358...
CVE-2020-29171
Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...
CVE-2020-29171
CVE-2020-29171 is a Cross-site Scripting (XSS) vulnerability in the WordPress plugin Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) up to version 4.4.6. The flaw resides in admin/wp-security-blacklist-menu.php and stems from insufficient input validatio...
CVE-2020-29171
Cross-site scripting XSS vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall all-in-one-wp-security-and-firewall plugin before 4.4.6 for WordPress...