arPHP cross-site scripting vulnerability

arPHP is a tool that enables Arabic web developers to provide search, presentation and processing of Arabic content in PHP. arPHP version 3.6.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output in Query.php. ...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

Arbitrary file deletion

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

CVE-2022-28462 affects novel-plus 3.6.0 with an Arbitrary file reading vulnerability caused by lack of restrictions on file parameters. NVD CVSSv3.1 base score 7.5 (HIGH) with network access and no privileges required; confidentiality impact HIGH. PT-Security notes no available fix as of their en...

PT-2022-19043 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.0 Description: The issue is related to an Arbitrary file reading vulnerability. Recommendations: For novel-plus version 3.6.0, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-28081

A reflected cross-site scripting XSS vulnerability in the component Query.php of arPHP v3.6.0 allows attackers to execute arbitrary web scripts...

CVE-2022-1329

The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files...

Elementor安全漏洞

Elementor is a website builder from Israeli company Elementor that allows WordPress users to create and edit websites. There is a security vulnerability in Elementor versions 3.6.0 to 3.6.2. There is no information about the vulnerability at this time, so please stay tuned to CNNVD or the vendor'...

ALPINE-CVE-2022-26280

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...

UBUNTU-CVE-2022-26280

Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipxlzmaaloneinit...

WordPress Sky Login Redirect plugin < 3.6.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Sky Login Redirect plugin versions 3.6.0. Solution Update the WordPress Sky Login Redirect plugin to the latest available version at least 3.6.0...

AZL-8614 CVE-2022-0586 affecting package wireshark for versions less than 3.4.14-1

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

DEBIAN-CVE-2022-0582

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

AZL-8612 CVE-2022-0581 affecting package wireshark for versions less than 3.4.14-1

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

CVE-2022-0581

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

Design/Logic Flaw

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file...

CVE-2022-0581

Wireshark CMS dissector crash (CVE-2022-0581) affects Wireshark 3.6.0–3.6.1 and 3.4.0–3.4.11, causing denial of service via crafted capture files or packet injection. Connected advisories confirm the issue and list fixes in later Wireshark builds: e.g., Debian LTS DLA-2967-1 fixes include Wiresha...

PT-2022-16723 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-plus version 3.6.0 Description: The issue is related to Server-Side Request Forgery SSRF that can be triggered via user-supplied crafted input. Recommendations: For Novel-plus version 3.6.0, update to a version that fixes the Server-Sid...