407 matches found
CVE-2022-4570
The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users suc...
CVE-2022-4570
The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users suc...
Cross site scripting
The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users suc...
PT-2023-14732 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: The Top 10 WordPress plugin versions prior to 3.2.3 Description: The issue concerns the lack of validation and escaping of certain Block attributes, which could lead to Stored Cross-Site Scripting attacks. Users with a role as low as...
WordPress plugin Top 10 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-10153 · Anant · Google-Enterprise-Connector-Dctm
Name of the Vulnerable Software and Affected Versions: Anant Labs google-enterprise-connector-dctm versions up to 3.2.3 Description: A critical vulnerability has been found in the software, affecting an unknown functionality. The manipulation of the username and domain arguments leads to SQL...
google-enterprise-connector-dctm SQL注入漏洞
google-enterprise-connector-dctm is a Google Search Appliance connector for individual developers. A SQL injection vulnerability exists in google-enterprise-connector-dctm 3.2.3 and below, which can be exploited by an attacker to manipulate the parameter username/domain resulting in a sql injecti...
AZL-13063 CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
rsync security and bug fix update
3.2.3-18 - Resolves: 2111177 - remote arbitrary files write inside the directories of connecting peers 3.2.3-17 - Resolves: 2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.2.3-16 - Related: 2081296 - Adding ci.fmf for...
UBUNTU-CVE-2022-4064
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
WordPress plugin WP Word Count 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
OESA-2022-2016 hadoop security update
Apache Hadoop is a framework that allows for the distributed processing of large data sets across clusters of computers using simple programming models. It is designed to scale up from single servers to thousands of machines, each offering local computation and storage. Security Fixes: In Apache...
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...
CVE-2022-34917 Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
A security vulnerability has been identified in Apache Kafka. It affects all releases since 2.8.0. The vulnerability allows malicious unauthenticated clients to allocate large amounts of memory on brokers. This can lead to brokers hitting OutOfMemoryException and causing denial of service. Exampl...
CVE-2021-37819
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java...
pdftk-java 安全漏洞
pdftk-java is a toolkit for working with Portable Document Format PDF documents from the PDF Labs team. A security vulnerability exists in version 3.2.3 of pdftk-java, which originates from an infinite loop contained in the /text/pdf/PdfReader.java component...
PT-2022-10671 · Pdf +1 · Pdftk-Java +1
Name of the Vulnerable Software and Affected Versions: PDF Labs pdftk-java version 3.2.3 Description: The issue is related to an infinite loop in the PdfReader.java component. This component is part of the /text/pdf directory. Recommendations: For PDF Labs pdftk-java version 3.2.3, consider...
CVE-2022-32286
A vulnerability has been identified in Mendix SAML Module Mendix 7 compatible All versions V1.16.6, Mendix SAML Module Mendix 8 compatible All versions V2.2.2, Mendix SAML Module Mendix 9 compatible All versions V3.2.3. In certain configurations SAML module is vulnerable to Cross Site Scripting X...
GHSA-RMPJ-7C96-MRG8 Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher...
