3396 matches found
WordPress plugin WPFactory WPFactory Helper Cross Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
AZL-31817 CVE-2023-3180 affecting package qemu for versions less than 6.2.0-23
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...
A flaw in OpenSSH helper programs could lead to local privilege escalation
A flaw was found in OpenSSH. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. Depending on system configuration, inherite...
CVE-2023-37386
Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...
CVE-2023-37386
Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...
CVE-2023-37386 WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...
CVE-2023-37386 WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Media Library Helper plugin = 1.2.0 versions...
CVE-2023-37386
CVE-2023-37386 is a CSRF vulnerability in the WordPress plugin Media Library Helper by Codexin (
WordPress RelicWP Helper Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software RelicWP Helper Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6d323152ffbc Credits Rafie Muhammad Patchstack Required...
WordPress Themereps Helper Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Themereps Helper Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6799bde950c0 Credits Rafie Muhammad Patchstack Require...
Malicious code in firefly-utilities-helper-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...
CVE-2023-21257
In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-37456
The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS 115...
CVE-2023-37456
Summary of CVE-2023-37456 (Firefox for iOS) : The issue is a crash in the session restore helper when no parameter is sent to the message handler, affecting Firefox for iOS versions prior to 115. Per connected documents, this creates a denial-of-service risk that can be triggered remotely. The ro...
WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Media Library Helper by Codexin Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-37386 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 31c3323d9133 Credits...
WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)
Software WPFactory Helper Type Plugin Vulnerable versions = 1.5.2 Fixed in 1.5.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36689 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4681ca256d88 Credits Le Ngoc Anh...
PT-2023-4145 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 115 Description: The issue is related to insufficient input validation, which can lead to a denial-of-service DoS attack by a remote attacker. Specifically, the session restore helper crashes when no paramete...
Security Vulnerabilities fixed in Firefox for iOS 115 — Mozilla
The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. The session restore helper crashed whenever there was no parameter sent to the message handler...
