4411 matches found
GSD-2021-1002357 scsi: mpt3sas: Fix kernel panic during drive powercycle test
scsi: mpt3sas: Fix kernel panic during drive powercycle test This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by commit...
PT-2021-26825
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.4.294 Description: The issue is related to a kernel panic during a drive power cycle test. It was introduced in version v3.8 and fixed in version v4.4.294. The actual impact and attack plausibility have not y...
Microsoft released patch for actively exploited spoofing vulnerability
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. Microsoft AppX has a spoofing vulnerability that has been assigned CVE-2021-43890. Attackers are taking advantage of this critical vulnerability by deploying well-known malwares such as Emotet, Trickbot, and Bazaloader. Thi...
CVE-2021-42548
Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42548
Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42546
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42546
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42546
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42548
The WordPress plugin Share-one-Drive is affected by a reflected Cross-Site Scripting (XSS) vulnerability due to insufficient input validation in the search function. The issue affects versions up to 1.15.2 (premium plugin) and can be exploited by unauthenticated users. The vulnerability is mitiga...
CVE-2021-42548 reflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive
Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
CVE-2021-42546
The CVE-2021-42546 entry concerns WordPress plugin Use-Your-Drive (versions
CVE-2021-42546 Reflected XSS in search functionality of WP Cloud Plugins - Use-Your-Drive
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
Share One Drive < 1.15.3 - Reflected Cross-Site Scripting
Insufficient Input Validation in the search functionality of the plugin allows attackers to perform a reflected Cross-Site Scripting attack...
CVE-2021-42546: Improper Neutralization of Input During Web Page Generation
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
WordPress 插件跨站脚本漏洞
WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Wordpress plugin that stems from insufficient input validation in the Share-one-Drive search function of the Wordpress plugin prior to 1.15.3, allowing an unauthenticated user to create a...
Use Your Drive < 1.18.3 - Reflected Cross-Site Scripting
Insufficient Input Validation in the search functionality of the plugin allows attackers to perform a reflected Cross-Site Scripting attack...
WordPress 插件跨站脚本漏洞
WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Wordpress plugin that stems from insufficient input validation in the Use-Your-Drive search function of the Wordpress plugin prior to 1.18.3, allowing an unauthenticated user to create a...
CVE-2021-42548: Improper Neutralization of Input During Web Page Generation
Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack...
PT-2021-23623
Name of the Vulnerable Software and Affected Versions Use-Your-Drive versions prior to 1.18.3 Description The issue is related to insufficient input validation in the search functionality, allowing an unauthenticated user to craft a reflected Cross-Site Scripting attack. Recommendations For...
WordPress Share-one-Drive premium plugin <= 1.15.2 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by Trainer Red in WordPress Share-one-Drive premium plugin versions = 1.15.2. Solution Update the WordPress Share-one-Drive premium plugin to the latest available version at least 1.15.3...