CVE-2023-34010

Unauth. Reflected Cross-Site Scripting XSS vulnerability in submodule of David Lingren Media Library Assistant plugin = 3.0.7 versions...

CVE-2023-34010

Unauth. Reflected Cross-Site Scripting XSS vulnerability in submodule of David Lingren Media Library Assistant plugin = 3.0.7 versions...

CVE-2023-34010 WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in submodule of David Lingren Media Library Assistant plugin = 3.0.7 versions...

CVE-2023-34010 WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in submodule of David Lingren Media Library Assistant plugin = 3.0.7 versions...

CVE-2023-34010

CVE-2023-34010 affects WordPress Media Library Assistant plugin (submodule) up to version 3.0.7. The vulnerability is an unauthenticated reflected Cross-Site Scripting (XSS) flaw in a submodule, enabling reflected XSS without authentication. Patch available: upgrade to version 3.0.8, which fixes ...

WordPress plugin Media Library Assistant Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-34010: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in submodule of David Lingren Media Library Assistant plugin = 3.0.7 versions...

PT-2023-9186 · D Link · D-Link Network Assistant

Name of the Vulnerable Software and Affected Versions: D-Link Network Assistant affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target...

expressvirtualassistant.com Cross Site Scripting vulnerability OBB-3552960

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.4.3 is vulnerable to Server Side Request Forgery (SSRF)

Software AI Content Writing Assistant Content Writer, ChatGPT, Image Generator All in One Type Plugin Vulnerable versions = 1.4.3 Fixed in 1.4.4 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE N/A Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PS...

Every company has its own version of ChatGPT now

Welcome to this weeks edition of the Threat Source newsletter. When I first started poking at ChatGPT a few months ago, I quickly learned that it wasnt quite ready to take my job yet and wasnt staying up to date on wrestling. Since ChatGPT went viral, several other companies have released their o...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework denial of service vulnerabilitiy [CVE-2023-20863]

Summary Potential VMware Tanzu Spring Framework denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-20863 Vulnerability Details...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Apache Spark privilege escalation vulnerabilitiy [ CVE-2023-22946]

Summary Potential Apache Spark privilege escalation vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-22946 Vulnerability Details CVEID:CVE-2023-22946...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js Request module denial of service vulnerabilitiy [ CVE-2023-28155]

Summary Potential Node.js Request module denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-28155 Vulnerability Details...

WordPress WooCommerce EU VAT Assistant Plugin <= 2.0.43.230518 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce EU VAT Assistant Type Plugin Vulnerable versions = 2.0.43.230518 Fixed in 2.1.2.230718 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b78924498cc5 Credits Rafi...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework denial of service vulnerabilitiy [CVE-2023-20863]

Summary Potential VMware Tanzu Spring Framework denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-20863 Vulnerability Details...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to RubyGems commonmarker gem denial of service vulnerabilitiy [IBM X-Force ID: 252809]

Summary Potential RubyGems commonmarker gem denial of service vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability has been addressed. Refer to details for additional information. IBM X-Force ID: 252809 Vulnerability Details IBM...

WordPress Media Library Assistant Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)

Software Media Library Assistant Type Plugin Vulnerable versions = 3.0.7 Fixed in 3.0.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34010 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID f822de5bf135 Credits Phd...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to GNU Libtasn1 information disclosure vulnerability [CVE-2021-46848]

Summary Potential GNU Libtasn1 information disclosure vulnerability has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. This vulnerability has been addressed. Refer to details for additional information. CVE-2021-46848 Vulnerability Details CVEID:CVE-2021-46848...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulnerabilities in Python

Summary Potential vulnerabilities in Python have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. These vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2021-28861 DESCRIPTION: Python could allow a...