WordPress plugin 跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is a WordPress application plugin. WordPress Child Theme Generator plugin version 2.2.7 and earlier versions have a cross-site scripting vulnerability that stems from the failure of the...

Cross-site Scripting in jeecg-boot

jeecg-boot is a code generator. A Cross Site Scripting XSS vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

The vulnerability in the implementation of the password reset function of the Fortinet FortiPortal security analysis and management tool allows a hacker to escalate their privileges.

The vulnerability of the password reset function implementation in the Fortinet FortiPortal security management and analysis tool is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Fortinet FortiPortal Security Feature Issue Vulnerability

Fortinet FortiPortal is an advanced, feature-rich managed security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for use by MSPs. versions, a security feature issue vulnerability exists that stems from the use o...

CVE-2021-36171

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...

CVE-2021-36171

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...

Design/Logic Flaw

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...

CVE-2021-36171

The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before 6.0.6 may allow a remote unauthenticated attacker to predict parts of or the whole newly generated password within a given time frame...

CVE-2021-44961

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability...

Fortinet FortiPortal 安全特征问题漏洞

Fortinet FortiPortal is an advanced, feature-rich managed security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for use by MSPs. versions, a security feature issue vulnerability exists that stems from the use o...

Slic3r 缓冲区错误漏洞

Slic3r is a Slic3r open source 3D printing toolkit used to convert various 3-D print model file types to machine code for a specific printer A buffer error vulnerability exists in Slic3r libslic3r that stems from a memory leak flaw in class PerimeterGenerator in Slic3r libslic3r version 1.3.0 and...

WordPress Woocommerce Newsletter Image Generator plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Woocommerce Newsletter Image Generator plugin versions = 1.0.0. Solution No patched version available...

WordPress Feedpress Generator plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Feedpress Generator plugin versions = 1.0.1. Solution Update the WordPress Feedpress Generator plugin to the latest available version at least 1.2.0...

WordPress Feedpress Generator plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Feedpress Generator plugin versions = 1.0.1. Solution Update the WordPress Feedpress Generator plugin to the latest available version at least 1.2.0...

WordPress Video Embed & Thumbnail Generator plugin < 4.7.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Video Embed & Thumbnail Generator plugin versions 4.7.4. Solution Update the WordPress Video Embed & Thumbnail Generator plugin to the latest available version at least 4.7.4...

WordPress Woocommerce Newsletter Image Generator plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Woocommerce Newsletter Image Generator plugin versions = 1.0.0. Solution No patched version available...

WordPress Video Embed & Thumbnail Generator plugin < 4.7.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Video Embed & Thumbnail Generator plugin versions 4.7.4. Solution Update the WordPress Video Embed & Thumbnail Generator plugin to the latest available version at least 4.7.4...

WordPress SEO Landing Page Generator plugin <= 1.61.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SEO Landing Page Generator plugin versions = 1.61.0. Solution Update the WordPress SEO Landing Page Generator plugin to the latest available version at least 1.62.0...

Low: Red Hat Security Advisory: 389-ds-base security and bug fix update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Jeecg-boot SQL Injection Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...