SUSE: Security Advisory (SUSE-SU-2024:0058-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:0012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-13059 · Silicon · Gecko Sdk

Name of the Vulnerable Software and Affected Versions: Gecko SDK versions 4.3.x and earlier Description: The issue is related to an unvalidated input in the Silicon Labs TrustZone implementation, allowing an attacker to access the trusted region of memory from the untrusted region. Recommendation...

CVE-2023-47091

An issue was discovered in Stormshield Network Security SNS SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible...

moodle Cross-Site Scripting Vulnerability

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in moodle versions 4.3, 4.2 through 4.2.3, which stems from a cross-site scripting...

SUSE: Security Advisory (SUSE-SU-2023:4902-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-47707

IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2023-47707

CVE-2023-47707 affects IBM Security Guardium Key Lifecycle Manager (GKLM) 4.3. It is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. The primary affected product i...

CVE-2023-47706 IBM Security Guardium Key Lifecycle Manager file upload

IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341...

CVE-2023-47706

CVE-2023-47706 affects IBM Security Guardium Key Lifecycle Manager (KLM) 4.3. An authenticated user could upload files of a dangerous file type. The connected IBM bulletin lists multiple vulnerabilities in GKLM and notes fixes in GKLM v4.2.0.2; it instructs applying the latest fix packs. The exac...

CVE-2023-47705

IBM Security Guardium Key Lifecycle Manager 4.3 includes a vulnerability where an authenticated user could manipulate username data due to improper input validation (CVE-2023-47705). The IBM security bulletin (and cross-referenced records) confirms this CVE and notes the issue exists in GKLM and ...

IBM Security Guardium Cross-Site Scripting Vulnerability

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customizable UI, report management, and streamlined audit process building. A cross-site scripting vulnerability exists in IBM...

CVE-2023-49842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpexpertsio Rocket Maintenance Mode & Coming Soon Page allows Stored XSS.This issue affects Rocket Maintenance Mode & Coming Soon Page: from n/a through 4.3...

CVE-2023-49842 WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpexpertsio Rocket Maintenance Mode & Coming Soon Page allows Stored XSS.This issue affects Rocket Maintenance Mode & Coming Soon Page: from n/a through 4.3...

Schweitzer Engineering Laboratories SEL-411L

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schweitzer Engineering Laboratories Equipment : SEL-411L Vulnerability : Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of this vulnerability...

Exploit for Code Injection in Qodeinteractive Qode_Essential_Addons

CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Aut...

Important: Red Hat Enhancement Advisory: ACS 4.3 enhancement update

Updated images are now available for Red Hat Advanced Cluster Security. The updated image includes new features and bug fixes. Release of ACS 4.3 provides these changes: New features: Increased support for hardware and software Vulnerability reporting 2.0 is generally available Watch and scan...

SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2023:4412-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:4412-1 advisory. - Update to SUSE Manager 4.3.9 Debian 12 support as client New Update Notification jscSUMA-111 Monitoring: Grafana upgraded to 9.5.8 Update 'saltkey'...

WordPress Korea SNS Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Korea SNS Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47670 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ecfef873e396 Credits LEE SE HYOUNG...

Cross site scripting

DISPUTED Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content are used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students...