WordPress Font Awesome 4 Menus Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Font Awesome 4 Menus Type Plugin Vulnerable versions = 4.7.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4718 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 251cbcaf2eb8 Credits István Márton Require...

QSvgFont Qt SVG DoS

The vulnerability of the QSvgFont function Qt SVG in the cross-platform framework for Qt software development is related to the possibility of bypassing the catalog. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2023-5253

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.3-DEV Description The issue is related to an out-of-bounds write in the gpac multimedia platform, specifically in the swf def font function located at Scene manager/swf parse.c:1449. This can lead to a buffer overflow,...

OESA-2023-1580 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

OESA-2023-1579 qt security update

Qt pronounced as "cute", not "cu-tee" is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo ...

CVE-2023-4718

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2023-4718

CVE-2023-4718 affects Font Awesome 4 Menus for WordPress. The vulnerability is a Stored XSS via the fa and fa-stack shortcode attributes in versions

CVE-2023-4718 Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2023-4718 Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

PT-2023-30347 · WordPress · Font Awesome 4 Menus

Name of the Vulnerable Software and Affected Versions: Font Awesome 4 Menus plugin for WordPress versions up to, and including, 4.7.0 Description: The issue is related to Stored Cross-Site Scripting via the fa and fa-stack shortcodes due to insufficient input sanitization and output escaping on...

CVE-2023-4718: Improper Neutralization of Input During Web Page Generation

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

WordPress plugin Font Awesome 4 Menus Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

Memory Leak

mupdf is vulnerable to Memory Leak. The vulnerability exists in the pdf-font-add.c, which allows an attacker to gain sensitive information...

kernel: when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds

An out-of-bounds write flaw was found in the Linux kernel’s console driver functionality in the way a user triggers the ioctl PIOFONT with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Google Chrome Font Component Data Compromise

The vulnerability of Google Chrome’s Font component is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

DEBIAN-CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

UBUNTU-CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the /pdf/pdf-font-add.c component. An attacker can obtain sensitive information by exploiting a memory leak issue. Remediation Upgrade mupdf to version 1.18.0 or higher...

PT-2023-11754

Name of the Vulnerable Software and Affected Versions Artifex Software MuPDF version 1.17.0 Description A memory leak issue in the /pdf/pdf-font-add.c file allows attackers to obtain sensitive information. Recommendations For Artifex Software MuPDF version 1.17.0, at the moment, there is no...