PT-2022-26276 · WordPress · Chained Quiz

Name of the Vulnerable Software and Affected Versions: Chained Quiz plugin for WordPress versions up to, and including, 1.3.2.2 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to...

CVE-2022-4213: Improper Neutralization of Input During Web Page Generation

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dn' parameter on the 'chainedquizlist' page in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2540 Malicious code in dn-dev-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e433e9c51ba0d7390b2014d0f7bfc5b91ac15b47e043e4bda69962f8412a8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2022-1726 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2022-1726 Source advisory: OSV:GHSA-GRW5-G9H2-WPG8...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2022-1726 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2022-1726 Source advisory: GHSA-GRW5-G9H2-WPG8...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2022-1726 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2022-1726 Source advisory: MEND:CVE-2022-1726...

GLPI Information Disclosure Vulnerability (CNVD-2022-44238)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build a database to fully manage IT computers, monitors, servers, printers, network devices, phones, even toner cartridges...

CVE-2022-24867

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. When you pass the config to the javascript, some entries are filtered out. The variable ldappass is not filtered and when you look at the source code of the...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2022:0283-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0283-1 advisory. - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN strin...

Mageia: Security Advisory (MGASA-2014-0557)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-2895)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: OSV:GHSA-MW6Q-98MP-G8G8...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: GHSA-MW6Q-98MP-G8G8...

Security Bulletin: Vulnerability in Kerberos affects Power Hardware Management Console ( CVE-2018-5730 CVE-2018-5729)

Summary MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container...

dn-bootstrap-table-mobile (1.0.0) potentially affected by CVE-2021-23472 via bootstrap-table (1.11.1)

bootstrap-table NPM version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-table and may be impacted: - dn-bootstrap-table-mobile 1.0.0 Source cves: CVE-2021-23472 Source advisory: SNYK:JS-BOOTSTRAPTABLE-1657597...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-2079)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2021-2079)

According to the versions of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an...

EulerOS Virtualization 3.0.6.6 : openldap (EulerOS-SA-2021-2029)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c...

EulerOS Virtualization for ARM 64 3.0.6.0 : openldap (EulerOS-SA-2021-2004)

According to the versions of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the...