RHEL 9 : tomcat (RHSA-2024:3308)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3308 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: HTTP/2 heade...

CVE-2024-3308

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-3308

CVE-2024-3308 affects HT Mega – Absolute Addons For Elementor (WordPress). Stored XSS in the Image Grid widget before/including v2.4.9 due to insufficient input sanitization and output escaping; exploitable by authenticated users with Contributor+ access. Root cause: inadequate sanitization/escap...

CVE-2024-3308 HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in wlwz-2312-3308 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aadff2d0623d60419d581ed714c50c515ba22117fc3e535470ff8ce000cf617 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2023:3308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization

A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...

CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization

A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...

CVE-2023-3308

CVE-2023-3308 concerns whaleal IceFrog v1.1.8, where the vulnerability is in the Aviator Template Engine. The provided documents consistently describe a deserialization vulnerability in that component, enabling untrusted data to be deserialized within whaleal IceFrog. Exploitation is acknowledged...

Debian: Security Advisory (DLA-3308-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3308-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3308-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 06, 2023 https://wiki.debian.org/LTS -...

MariaDB 5.5.0 < 5.5.55 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.55 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

DEBIAN-CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

UBUNTU-CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2022-3308

CVE-2022-3308 is a Medium-severity issue in Google Chrome/Chromium Developer Tools (insufficient policy enforcement) that could enable sandbox escape via a crafted HTML page. Debian/ Mageia advisories indicate the fix was released in Chromium 106.x: Debian notes 106.0.5249.61 (chromium) as the fi...

Mageia: Security Advisory (MGASA-2022-0357)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chromium: CVE-2022-3308 Insufficient policy enforcement in Developer Tools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...