29 matches found
CVE-2022-30517
Mogu blog 5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2024-30517
Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2...
CVE-2024-30517 WordPress Sliced Invoices plugin <= 3.9.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2...
WordPress Sliced Invoices Plugin <= 3.9.2 is vulnerable to Broken Access Control
Software Sliced Invoices Type Plugin Vulnerable versions = 3.9.2 Fixed in 3.9.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30517 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f6c77e858dd8 Credits Lucio Sá Required privilege...
CVE-2021-30517
creationtimestamp| type| source ---|---|--- 2023-12-01 08:19:51+00:00| seen| https://t.me/arpsyndicate/843...
Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.15 Multiple Vulnerabilities (CloudBees Security Advisory 2023-04-12)
The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.15. It is, therefore, affected by multiple vulnerabilities including the following: - Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask i.e....
CVE-2023-30517
creationtimestamp| type| source ---|---|--- 2023-04-12 22:24:33+00:00| seen| https://t.me/cibsecurity/61999 2024-01-03 16:48:12+00:00| seen| https://t.me/arpsyndicate/2330...
CVE-2023-30517
Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server...
CVE-2023-30517
CVE-2023-30517 affects Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier. The root cause is that the plugin unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server, exposing clients to potential inte...
CVE-2022-30517
Mogu blog 5.2 is vulnerable to Cross Site Scripting XSS...
CVE-2022-30517
Affected software: Mogu blog 5.2. The CVE-2022-30517 entry relates to a Cross Site Scripting (XSS) vulnerability. A connected document (CNNVD-202207-1188) provides a concrete technical detail: the issue stems from the upload handling, where the format of user uploads is not strictly verified and ...
CVE-2021-30517
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2021-30517
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-30517
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30517
CVE-2021-30517 describes a type confusion in the V8 engine within the Chromium browser, fixed before version 90.0.4430.212. The vulnerability, present in the Chromium/WebKit stack used by Google Chrome and related builds, could allow a remote attacker to trigger heap-related issues via a crafted ...
CVE-2021-30517
Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
openSUSE Security Update : opera (openSUSE-2021-828)
This update for opera fixes the following issues : Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: Use old password button doesnt work - DNA-926...
openSUSE Security Update : chromium (openSUSE-2021-762)
This update for chromium fixes the following issues : This is a rerelease with aarch64 enabled. Chromium 90.0.4430.212 boo1185908 - CVE-2021-30506: Incorrect security UI in Web App Installs - CVE-2021-30507: Inappropriate implementation in Offline - CVE-2021-30508: Heap buffer overflow in Media...
Debian: Security Advisory (DSA-4917-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4917-1 : chromium - security update
Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-30506 @retsew0x01 discovered an error in the Web App installation interface. - CVE-2021-30507 Alison Huffman discovered an error in the Offline mode. - CVE-2021-30508 Leecraso and Guang Gong discovered a buffer...