CVE-2022-4921

Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

WordPress Web Accessibility By accessiBe Plugin <= 1.15 is vulnerable to Cross Site Scripting (XSS)

Software Web Accessibility By accessiBe Type Plugin Vulnerable versions = 1.15 Fixed in 1.16 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c7254c9aee27 Credits WordFence Required...

CVE-2022-4921: Use After Free

Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

Why It’s Important to Make Tech More Accessible

...

PT-2023-5808 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.9 and earlier iOS versions 15.7.8 and earlier iPadOS versions 15.7.8 and earlier macOS Monterey versions 12.6.8 and earlier Description: A privacy issue was addressed with improved private data redaction for log...

The vulnerability of Google Chrome browser-based PDF processing components allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome browser-based PDF processors relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

SUSE: Security Advisory (SUSE-SU-2023:2886-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2886-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR New: - Required fields are now highlighted in PDF forms. - Improved performance on...

The vulnerability of the Amateur Radio X.25 PLP (Rose) kernel implementation in the Linux operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Amateur Radio X.25 PLP Rose kernel implementation in the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the vcs_read() function in the drivers/tty/vt/vc-screen.c module of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vcsread function in the drivers/tty/vt/vc-screen.c module of the Linux kernel is related to the use of previously freed memory due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

WordPress Accessibility Checker by Equalize Digital Plugin < 1.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Accessibility Checker by Equalize Digital Type Plugin Vulnerable versions 1.4.2 Fixed in 1.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Equalize Digital PSID d2ab23b259fd Credits Rafie...

Design/Logic Flaw

Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...

CVE-2023-3586 Disabling publicly-shared boards does not disable existing publicly available board links

Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible...

SUSE-SU-2023:2850-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR New: - Required fields are now highlighted in PDF forms. - Improved performance on...

SUSE-SU-2023:2849-1 Security update for MozillaFirefox, MozillaFirefox-branding-SLE

This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR New: - Required fields are now highlighted in PDF forms. - Improved performance on...

Exploit for Deserialization of Untrusted Data in Spip

CVE-2023-27372-POC Overview This Python POC Proof of Con...

CVE-2023-2028

The Call Now Accessibility Button WordPress plugin before 1.1 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2635 Call Now Accessibility Button < 1.1 - Admin+ Stored XSS

The Call Now Accessibility Button WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2635

CVE-2023-2635 concerns the WordPress plugin Call Now Accessibility Button (versions prior to 1.1). The issue is that the plugin does not sanitize and escape certain settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, such as in multisite d...

CVE-2023-2028

The CVE-2023-2028 issue affects the Call Now Accessibility Button WordPress plugin and is caused by improper sanitization of certain settings. Versions prior to 1.1 allow Stored Cross-Site Scripting (XSS) by high-privilege users even when unfiltered_html is disallowed (e.g., in multisite). Public...