WordPress Calendar.online / Kalender.digital Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)

Software Calendar.online / Kalender.digital Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38678 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 304ab3163d72 Credits LVT-tholv2k Require...

CVE-2023-38678

creationtimestamp| type| source ---|---|--- 2024-01-03 10:26:49+00:00| seen| https://t.me/ctinow/162281 2024-01-04 01:33:44+00:00| seen| https://t.me/cibsecurity/74294 2024-01-23 14:26:39+00:00| seen| https://t.me/ctinow/171990...

CVE-2023-38678

OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38678

OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38678 Segfault in paddle.mode

OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38678

Summary (CVE-2023-38678) : PaddlePaddle’s paddle.mode contains an out-of-bounds access vulnerability in versions before 2.6.0. This flaw can cause a runtime crash and a denial of service. The available connected documents corroborate the same description but do not provide explicit exploit detail...

CVE-2022-38678

CVE-2022-38678 describes a missing permission check in the contacts service that could lead to a local denial-of-service without requiring additional privileges. The vulnerability affects the contacts service component and is characterized by a local attack vector with low attack complexity and l...

CVE-2022-38678

In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional execution privileges needed...

CVE-2021-38678

An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1....

CVE-2021-38678

CVE-2021-38678 describes an open redirect vulnerability in QNAP QcalAgent. The issue allows an attacker to redirect users to an untrusted page that could host malware. Affected product is QNAP QcalAgent (version affected: prior to 1.1.7; fixed in 1.1.7 and later). Impact aligns with the CVSS: net...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-38678)

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.1 and prior version...