WordPress Custom Dash Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Custom Dash Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4942 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 647ce8d91dbf Credits Artem Polynko Artem Polynko...

PT-2024-33530 · WordPress · Custom Dash

Name of the Vulnerable Software and Affected Versions: Custom Dash plugin for WordPress version 1.0.2 and earlier Description: The Custom Dash plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This make...

[SECURITY] Fedora 40 Update: zeal-0.7.0-10.fc40

Zeal is a simple offline documentation browser inspired by Dash...

Client Dash <= 2.2.1 - Missing Authorization

Description The Client Dash plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to perform an unauthorized action...

CVE-2024-33652

Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1...

CVE-2024-33652 WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1...

CVE-2024-33652 WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1...

PT-2024-25413 · Real Big Plugins · Real Big Plugins Client Dash

Name of the Vulnerable Software and Affected Versions: Real Big Plugins Client Dash versions 2.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Real Big Plugins Client Dash. Recommendations: For versions 2.2.1 and earlier, update to a version later tha...

WordPress plugin Client Dash 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL. WordPress plugin is ...

WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Skalucy Patchstack Alliance in WordPress Plugin Client Dash versions = 2.2.1...

WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Broken Access Control

Software Client Dash Type Plugin Vulnerable versions = 2.2.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33652 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 999732255bed Credits Skalucy Required privilege...

CVE-2023-34020

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.6.4.3...

DEBIAN-CVE-2024-28319

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain an out of boundary read vulnerability via gfdashsetupperiod mediatools/dashclient.c:6374...

UBUNTU-CVE-2024-28319

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain an out of boundary read vulnerability via gfdashsetupperiod mediatools/dashclient.c:6374...

PT-2024-22389 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.3-DEV-rev921-g422b78ecf-master Description: The issue is related to an out of boundary read vulnerability via the gf dash setup period function in the media tools/dash client.c file at line 6374. This vulnerability can allow a...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev921-g422b78ecf-master, which originated from a discovery via gfdashsetupperiod mediatools/dashclient.c:6374 that contained an out-of-bounds read vulnerability...

CVE-2024-28319

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain an out of boundary read vulnerability via gfdashsetupperiod mediatools/dashclient.c:6374...

Null Pointer Deference

libgpac.so is vulnerable to Null Pointer Deference. The vulnerability is due to the gfdashsetupperiod function within dashclient.c which has no validation when parsing DASH manifest files to ensure values are non-null before accessing their properties. This flaw allow attackers to craft malicious...

UBUNTU-CVE-2023-46427

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service DoS, and obtain sensitive information via null pointer deference in gfdashsetupperiod component in mediatools/dashclient.c...

CVE-2023-46427

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service DoS, and obtain sensitive information via null pointer deference in gfdashsetupperiod component in mediatools/dashclient.c...