EUVD-2007-4994

Malware in sbrugna...

EUVD-2008-4427

Malware in sbrugna...

EUVD-2024-36662

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-1763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw...

CVE-2024-37434

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 3.31...

WordPress plugin WooCommerce HSS Extension for Streaming Video 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

CVE-2024-37434

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Atarim allows Stored XSS.This issue affects Atarim: from n/a through 3.31...

WordPress Atarim Plugin <= 3.31 is vulnerable to Cross Site Scripting (XSS)

Software Atarim Type Plugin Vulnerable versions = 3.31 Fixed in 3.32 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37434 Patch priority Low CVSS severity Low 5.9 Developer Atarim PSID c53738d448b9 Credits piro Required privilege Administrator Published 28 June,...

Fortanix EnclaveOS Confidential Computing Manager Platform Security Vulnerability

Fortanix EnclaveOS Confidential Computing Manager Platform is a cloud-native service from Fortanix, Inc. that provides a complete solution for confidential computing in the cloud and in local workloads. A security vulnerability exists in Fortanix EnclaveOS Confidential Computing Manager Platform...

PT-2021-4116 · Pypi +1 · Thefuck +1

Name of the Vulnerable Software and Affected Versions: TheFuck versions prior to 3.31 Description: The issue is related to path traversal weaknesses in the TheFuck package for Python, allowing an attacker to compromise data integrity and cause a denial of service. This can lead to arbitrary file...

Libreswan Buffer Overflow Vulnerability

Libreswan is an IPsec implementation similar to Openswan, which is mainly used to ensure security, integrity issues in data transmission. A buffer overflow vulnerability exists in the pluto daemon in libreswan versions 3.27 through 3.31. An attacker can exploit this vulnerability by sending...

DEBIAN-CVE-2020-1763

An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash...

HP Onboard Administrator Security Bypass Vulnerability

HP Onboard Administrator is prone to a security bypass vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2005-4879

The CVE-2005-4879 entry describes XSS vulnerabilities in the PHP script jax_guestbook.php of Jax Guestbook, affecting versions 3.1, 3.31, and 3.50. The weaknesses arise from unsanitized user input in parameters such as gmt_ofs and language (and page per related CVEs), allowing remote attackers to...

DSECRG-08-006.txt

It is updated version of advisory. updated info in "Fix Information" part, mistake in vendor name. Digital Security Research Group DSecRG Advisory DSECRG-08-006 Application: Nucleus CMS Versions Affected: 3.31 Vendor URL: http://nucleuscms.org Bugs: XSS Injection in URL Exploits: YES Reported:...

CVE-2004-2691

Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service device reset via a crafted request to the web management interface. NOTE: the provenance of this information is unknown; details are obtained from...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2007-5013

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2007-5013

CVE-2007-5013 corresponds to multiple XSS vulnerabilities in Phormer 3.31, specifically in index.php where the (1) u, (2) p, (3) c, and (4) s parameters (and other vectors) can be exploited to inject arbitrary script/HTML. The connected documents corroborate the presence of XSS via these input po...

CVE-2007-5013

Multiple cross-site scripting XSS vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the 1 u, 2 p, 3 c, and 4 s parameters, and other unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained sole...