Elementor安全漏洞

Elementor is a website builder from Israeli company Elementor that allows WordPress users to create and edit websites. There is a security vulnerability in Elementor versions 3.6.0 to 3.6.2. There is no information about the vulnerability at this time, so please stay tuned to CNNVD or the vendor'...

PT-2022-9502 · WordPress · Protect Wp Admin

Name of the Vulnerable Software and Affected Versions: Protect WP Admin WordPress plugin versions prior to 3.6.2 Description: The issue concerns a lack of authorization check in the lib/pwa-deactivate.php file, potentially allowing unauthenticated users to disable the plugin through a crafted...

PT-2021-8668

Name of the Vulnerable Software and Affected Versions LimeSurvey version 3.6.2+180406 Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the changes cp parameter to the...

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

algoliasearch-helper 安全漏洞

algoliasearch-helper is an open source JavaScript module that helps you keep track of search parameters and provides a higher level API. A security vulnerability exists in algoliasearch-helper, which stems from the package algoliassearch -helper prior to 3.6.2, as parseNumbers has no protection f...

PT-2021-15521

Name of the Vulnerable Software and Affected Versions algoliasearch-helper versions prior to 3.6.2 Description The issue arises from the use of the merge function in src/SearchParameters/index.js, specifically in the SearchParameters. parseNumbers function, without protection against prototype...

WordPress Import any XML or CSV File to WordPress plugin <= 3.6.2 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Huy Nguyen in WordPress Import any XML or CSV File to WordPress plugin versions = 3.6.2. Solution Update the WordPress Import any XML or CSV File to WordPress plugin to the latest available version at least 3.6.3...

Python < 2.7.14, 3.3.x < 3.3.7, 3.4.x < 3.4.7, 3.5.x < 3.5.4, 3.6.x < 3.6.2 Expat 2.2.1 (bpo-30694) - Linux

'Expat SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.118250";...

Heif 缓冲区错误漏洞

HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicHeight function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions A global buffer overflow vulnerability exists. An attacker can exploit this...

heif 缓冲区错误漏洞

HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicWidth function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions has global buffer overflow vulnerability. An attacker can exploit this...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress All in One SEO Pack plugin prior to version...

Intel Data Center Manager Console Denial of Service Vulnerability

Intel Data Center Manager SDK is a data center management SDK software development kit from Intel USA. The product provides real-time power and cooling data for devices. A denial of service vulnerability exists in IntelR Data Center Manager Console versions prior to 3.6.2, which stems from improp...

aiohttp Detection (HTTP)

HTTP based detection of aiohttp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.112839";...

Input validation

Improper input validation in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access...

PT-2020-4977 · Intel · Intel Data Center Manager Console

Name of the Vulnerable Software and Affected Versions: Intel Data Center Manager Console versions prior to 3.6.2 Description: The issue is related to improper permissions in the installer for the Intel Data Center Manager Console, which may allow an authenticated user to potentially enable...

CVE-2020-25039

Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution...

CVE-2020-25039

Removed by vendor...

CVE-2020-25039

Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution...

Unspecified Vulnerability in Mattermost Server

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in the WebSocket functionality in Mattermost Server versions prior to 3.6.2, which stems from the program not following the same-origin policy. No details of the...