38 matches found
MINI-53JC-5945-V5MV
Bulletin has no description...
CVE-2025-5945
creationtimestamp| type| source ---|---|--- 2025-06-10 09:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lram72eh3j23...
CVE-2025-5945
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-5945
...
CVE-2023-5945
The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsivevideogallerywithlightboxvideomanagementfunc function. This makes it possible for unauthenticated attackers...
CVE-2024-5945
CVE-2024-5945 affects the WP SVG Images WordPress plugin, with stored XSS via the type parameter in all versions up to 4.2 due to insufficient input sanitization. Exploitation requires authentication (Author-level access or higher) and permissions to upload sanitized files. Successful abuse could...
CVE-2024-5945 WP SVG Images <= 4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
The WP SVG Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘type’ parameter in all versions up to, and including, 4.3 due to insufficient input sanitization. This makes it possible for authenticated attackers, with Author-level access and above, who have permissio...
WordPress WP SVG images Plugin <= 4.2 is vulnerable to Cross Site Scripting (XSS)
Software WP SVG images Type Plugin Vulnerable versions = 4.2 Fixed in 4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5945 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8b632fc271b3 Credits Colin Xu Required privilege...
CVE-2023-5945
creationtimestamp| type| source ---|---|--- 2023-11-03 15:23:39+00:00| seen| https://t.me/cibsecurity/73528...
CVE-2023-5945
CVE-2023-5945 affects the WordPress plugin video carousel slider with lightbox (wp-responsive-video-gallery-with-lightbox) version 1.0. Root cause: missing or incorrect nonce validation in responsive_video_gallery_with_lightbox_video_management_func(), enabling CSRF to delete videos hosted in the...
CVE-2023-5945
The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the responsivevideogallerywithlightboxvideomanagementfunc function. This makes it possible for unauthenticated attackers...
Ubuntu: Security Advisory (USN-5945-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Protocol Buffers vulnerabilities (USN-5945-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5945-1 advisory. It was discovered that Protocol Buffers did not properly validate field com.google.protobuf.UnknownFieldSet in protobuf-java. An...
K21540525: F5 TMUI XSS vulnerability CVE-2020-5945
Security Advisory Description Undisclosed TMUI page contains a stored cross site scripting vulnerability XSS. The issue allows a minor privilege escalation for resource admin to escalate to full admin. CVE-2020-5945 Impact A malicious, authenticated user with Resource Administrator privileges may...
Security Bulletin: IBM SPSS SamplePower Vsflex8l ActiveX control vulnerability (CVE-2012-5945)
Abstract There is a security vulnerability with the Vsflex8l ActiveX control shipped by IBM SPSS SamplePower Version 3. The vulnerability allows remote attackers to execute arbitrary code on installations of SamplePower when the control is invoked as ActiveX by Microsoft Internet Explorer. Conten...
CVE-2022-28624
A potential security vulnerability has been identified in certain HPE FlexNetwork and FlexFabric switch products. The vulnerability could be remotely exploited to allow cross site scripting XSS. HPE has made the following software updates to resolve the vulnerability. HPE FlexNetwork...
Hewlett Packard Enterprise FlexNetwork 和 FlexFabric 跨站脚本漏洞
Hewlett Packard Enterprise FlexNetwork HPE FlexFabric and Hewlett Packard Enterprise FlexFabric HPE FlexFabric are both U.S.-based Hewlett Packard Enterprise Hewlett Packard Enterprise FlexNetwork HPE FlexFabric A security vulnerability exists in Hewlett Packard Enterprise FlexNetwork...
CVE-2020-5945
In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross site scripting vulnerability XSS. The issue allows a minor privilege escalation for resource admin to escalate to full admin...
CVE-2020-5945
In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross site scripting vulnerability XSS. The issue allows a minor privilege escalation for resource admin to escalate to full admin...
CVE-2020-5945
CVE-2020-5945 affects F5 BIG-IP TMUI with a stored XSS in an undisclosed TMUI page that enables a Resource Administrator to escalate to full Administrator privileges. Affected versions: BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7. Fixes are in 16.1.0 (for 16.x), 15.1.1 (for 15.x), an...