CVE-2022-45814

The CVE-2022-45814 entry concerns the Fabian von Allmen WP Calendar plugin for WordPress, with a Stored Cross-Site Scripting (XSS) vulnerability affecting versions prior to or equal to 1.5.3. The issue originates from insufficient sanitisation/escaping of parameters (per WPVulndb and PT Security ...

CVE-2022-45814 WordPress WP Calendar Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)

Stored Cross-Site Scripting XSS vulnerability in Fabian von Allmen WP Calendar plugin = 1.5.3 versions...

PT-2023-14764 · Fabian Von Allmen · Wp Calendar

Name of the Vulnerable Software and Affected Versions: Fabian von Allmen WP Calendar plugin versions prior to 1.5.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into content from...

CVE-2023-23397: The Notification Sound You Don’t Want to Hear

CVE-2023-23397: The Notification Sound You Don’t Want to Hear By Mark Bereza · March 17, 2023 This story was also written by John Dunlap. Overview During the March "Patch Tuesday" security update, a new Outlook security vulnerability was revealed as being exploited in the wild. This is a serious...

WordPress Plugin Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2023-21464

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

CVE-2023-21464

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

CVE-2023-21464

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

Improper access control

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

Malicious code in teams-calendar-webpart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4407eeb60493ba69d7ef590b289a23d09231c321ce9840fe680bc0a0709be8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-848 Malicious code in teams-calendar-webpart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4407eeb60493ba69d7ef590b289a23d09231c321ce9840fe680bc0a0709be8a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress CP Multi View Event Calendar Plugin <= 1.4.10 is vulnerable to Other Vulnerability Type

Software CP Multi View Event Calendar Type Plugin Vulnerable versions = 1.4.10 Fixed in 1.4.11 OWASP Top 10 A5: Broken Access Control Classification Other Vulnerability Type CVE CVE-2023-28492 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1690516e9658 Credits István Márt...

CVE-2023-21464

CVE-2023-21464: Improper access control in Samsung Calendar allows a local attacker to configure an improper status. Affected are Samsung Calendar before 12.4.02.9000 on Android 13 and before 12.3.08.2000 on Android 12. Root cause is access control failure within the calendar app. Exploitation is...

CVE-2023-21464

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

PT-2023-18233 · Google +1 · Android 12 +2

Name of the Vulnerable Software and Affected Versions: Samsung Calendar versions prior to 12.4.02.9000 in Android 13 Samsung Calendar versions prior to 12.3.08.2000 in Android 12 Description: The issue is related to improper access control, allowing a local attacker to configure an improper statu...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices Samsung Calendar version 12.4.02.9000, which stems from an improper access control issue...

CVE-2022-47427

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...

CVE-2022-47427

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...

CVE-2022-47427

CVE-2022-47427: WordPress My Calendar plugin

CVE-2022-47427 WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.3.24.1 versions...