100 matches found
MiracleLinux 7 : java-1.6.0-openjdk-1.6.0.41-1.13.13.1.0.1.el7.AXS7 (AXSA:2017-1238:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1238:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5542 Unspecified vulnerability in Oracle Java SE 6u121, 7u111,...
MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.111-1.b15.el7 (AXSA:2016-709:07)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-709:07 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5542 RESERVED This candidate has been reserved by an organization ...
CVE-2025-5582
CVE-2025-5582 affects CodeAstro Real Estate Management System 1.0. The vulnerability is a SQL injection in the /profile.php file caused by improper handling of the content parameter, enabling remote exploitation. Publicly disclosed exploit code exists; impact is aligned with high confidentiality/...
CVE-2024-5582
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q Block widget in all versions up to, and including, 1.33 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2024-5582
creationtimestamp| type| source ---|---|--- 2024-07-17 10:41:44+00:00| seen| https://t.me/cvedetector/1063...
CVE-2024-5582 Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&A Block widget in all versions up to, and including, 1.33 due to insufficient input sanitization and output escaping on user supplied attribute...
CVE-2024-5582 Schema & Structured Data for WP & AMP <= 1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&A Block widget in all versions up to, and including, 1.33 due to insufficient input sanitization and output escaping on user supplied attribute...
WordPress Schema & Structured Data for WP & AMP Plugin <= 1.33 is vulnerable to Cross Site Scripting (XSS)
Software Schema & Structured Data for WP & AMP Type Plugin Vulnerable versions = 1.33 Fixed in 1.34.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5582 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6eff26d1a4e3 Credits...
CVE-2012-5582
creationtimestamp| type| source ---|---|--- 2024-02-27 08:16:54+00:00| seen| https://t.me/ctinow/194072...
Debian: Security Advisory (DSA-5582-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-5582
creationtimestamp| type| source ---|---|--- 2023-10-14 18:30:02+00:00| seen| https://t.me/cibsecurity/72286...
CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting
A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown processing of the component Personal Profile Page. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2023-5582
CVE-2023-5582 concerns ZZZCMS 2.2.0, where the Personal Profile Page’s processing permits basic cross-site scripting due to an unspecified handling flaw. Multiple connected documents consistently describe an XSS vulnerability that can be triggered remotely and for which exploits have been publicl...
Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5582-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5582-1 advisory. Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to...
Mageia: Security Advisory (MGASA-2016-0359)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2953-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2887-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-5582
CVE-2020-5582 affects Cybozu Garoon 4.0.0–5.0.1. The vulnerability allows remote authenticated attackers to bypass access restrictions and alter data for files attached to Reports via unspecified vectors (privilege bypass on attachments). Documented impact includes unauthorized modification of re...
CVE-2013-5582
Ammyy Admin
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2016-1080)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...