WordPress Plugin Mailtree Log Mail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. WordPress Plugin Mailtree Log Mail suffers...

WordPress Plugin WP Mail Logging 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Plugin YaySMTP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin YaySMTP suffers from a...

WordPress Plugin About Me 3000 widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

DEBIAN-CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

UBUNTU-CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

The vulnerability of My Cloud OS, a network storage operating system, allows a perpetrator to execute arbitrary commands.

The vulnerability of My Cloud OS network storage systems is related to the lack of measures for data cleanup at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of My Cloud OS, a network storage operating system, allows a perpetrator to execute arbitrary commands.

The vulnerability of My Cloud OS network storage systems is related to the lack of measures for data cleanup at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PiiGAB M-Bus 代码注入漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A code injection vulnerability exists in PiiGAB M-Bus version 900S, which stems from an inability to properly clean up user input and could allow an attacker to inje...

Mastodon 跨站脚本漏洞

Mastodon is an open source social network server based on ActivityPub. Mastodon suffers from a cross-site scripting vulnerability. An attacker exploits this vulnerability to bypass HTML cleanup and include arbitrary HTML in oEmbed preview cards...

USN-6200-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected PDF files. An attacker could possibly use this issue to inject additional shell commands and perform arbitrary code execution. This issue only affected Ubuntu 20.04 LTS. CVE-2020-29599 It was...

SUSE-SU-2023:2754-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2022-0897: Fixed crash when counting number of network filters bsc1197636. Bug fixes: - qemu: Fixed potential crash during driver cleanup bsc1209861. - libxl: Marked auto-allocated graphics ports to used on reconnect. - libxl: Released all...

SUSE CVE-2023-3354

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QE...

PT-2023-4596

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up...

The vulnerability of the CryptoAPI programming interface for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the CryptoAPI programming interface for Windows operating systems relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

WordPress plugin Beautiful Cookie Consent Banner 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

libvirt: Memory leak in virPCIVirtualFunctionList cleanup

A vulnerability was found in libvirt. This security flaw occurs due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's gautoptr cleanup...

The vulnerability of the Administrative XML Web Service (AXL) interface in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) systems allows a attacker to cause service failures.

The vulnerability of the Administrative XML Web Service AXL interface in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious...

Mattermost 注入漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a code injection vulnerability that stems from an inability to clean up code permalinks, which can be exploited by an attacker to preview code by posting a specially crafted lin...