CVE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2024-34000

The CVE-2024-34000 entry corresponds to a Moodle issue where ID numbers displayed in the lesson overview report require additional sanitizing to prevent a stored XSS risk. The OSV and NVD/NVD-derived entries confirm a stored XSS vulnerability in Moodle related to the lesson overview report, cause...

CVE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2024-34000

creationtimestamp| type| source ---|---|--- 2024-04-17 16:13:02+00:00| exploited| https://t.me/truesecator/5648...

CVE-2023-34000

creationtimestamp| type| source ---|---|--- 2023-06-14 11:39:59+00:00| seen| https://t.me/KomunitiSiber/351 2023-06-14 12:32:47+00:00| seen| Telegram/t3cqWzwDjK6ddjJDAVMQ8Vpb7vvKbk0EWfmgpna8bze8TA 2023-06-14 13:04:07+00:00| seen| Telegram/XyoaOBIG99P0srB2Mmkh6HprABLXkKimzzA2FVME2gVL3p0 2023-06-14...

Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin

A security flaw has been uncovered in the WooCommerce Stripe Gateway WordPress plugin that could lead to the unauthorized disclosure of sensitive information. The flaw, tracked as CVE-2023-34000, impacts versions 7.4.0 and below. It was addressed by the plugin maintainers in version 7.4.1, which...

CVE-2023-34000

CVE-2023-34000 affects WordPress WooCommerce Stripe Payment Gateway plugin versions up to 7.4.0, with a fix in 7.4.1. The vulnerability is an unauthenticated insecure direct object reference (IDOR) that allows viewing order PII (email, name, full address) due to inadequate access control in order...

CVE-2023-34000 WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin = 7.4.0 versions...

WordPress WooCommerce Stripe Payment Gateway Plugin <= 7.4.0 is vulnerable to Insecure Direct Object References (IDOR)

Software WooCommerce Stripe Payment Gateway Type Plugin Vulnerable versions = 7.4.0 Fixed in 7.4.1 OWASP Top 10 A5: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-34000 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 38958ed35e7d...

GLSA-202210-36 : libjxl: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-36 libjxl: Denial of Service - libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc. CVE-2022-34000 Note that Nessus has not tested for this issue but has inste...

CVE-2022-34000

CVE-2022-34000 affects the JPEG XL reference implementation libjxl 0.6.1, with an assertion failure in LowMemoryRenderPipeline::Init() located in render_pipeline/low_memory_render_pipeline.cc. The issue is described as a potential denial of service against the libjxl process when processing craft...