CVE-2023-3832

CVE-2023-3832 affects Bug Finder Wedding Wonders 1.0. The vulnerability exists in the /user/ticket/create function of the Ticket Handler where manipulation of the message parameter leads to cross-site scripting. Exploitation is described as remotely possible. The CVE is referenced in multiple sou...

CVE-2022-3832

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3832 External Media < 1.0.36 - Admin+ Stored XSS

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3832 External Media < 1.0.36 - Admin+ Stored XSS

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3832

CVE-2022-3832 affects the External Media WordPress plugin prior to 1.0.36. The root cause is improper sanitisation/escaping of some plugin settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite setups). Documents consiste...

GHSA-3832-9276-X7GF vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry...

GHSA-3832-9276-X7GF vulnerabilities

Vulnerabilities for packages: trino, apicurio-registry, zaproxy, hadoop-fips...

Mageia: Security Advisory (MGASA-2019-0300)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3832

creationtimestamp| type| source ---|---|--- 2021-10-07 18:33:46+00:00| seen| https://t.me/cibsecurity/30157...

CVE-2021-3832

CVE-2021-3832 affects Integria IMS 5.0.92 and exposes a Remote Code Execution vulnerability via the AsyncUpload() function, granting unauthenticated network-accessible attackers full code execution through file uploads. The issue is rooted in the upload handling, enabling an attacker to abuse the...

CVE-2021-3832

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload function in order to exploit the vulnerability...

CVE-2019-3832 affecting package libsndfile 1.0.28-14

CVE-2019-3832 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

CVE-2019-3832 affecting package libsndfile 1.0.28-14

CVE-2019-3832 affecting package libsndfile 1.0.28-14. An upgraded version of the package is available that resolves this issue...

EulerOS 2.0 SP2 : libsndfile (EulerOS-SA-2021-1319)

According to the version of the libsndfile package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2021-1319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : libsndfile vulnerabilities (USN-4704-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4704-1 advisory. It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash,...

Ubuntu: Security Advisory (USN-4704-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4704-1: libsndfile vulnerabilities

It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-12562 It was discovered that libsndfile incorrectly handled certain...

EulerOS Virtualization 3.0.6.6 : libsndfile (EulerOS-SA-2020-2469)

According to the version of the libsndfile package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in...

Huawei EulerOS: Security Advisory for libsndfile (EulerOS-SA-2020-2469)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...