197 matches found
PT-2025-15167 · Keymaster · Keymaster
Name of the Vulnerable Software and Affected Versions: keymaster affected versions not specified Description: The issue is related to a missing bounds check in keymaster, which could lead to a possible out of bounds read. This might result in local information disclosure if a malicious actor has...
WordPress plugin bbPress 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...
WordPress: Pivilege escalation of any new user to Keymaster caused by CSRF
A vulnerability in the bbPress plugin allowed an attacker to escalate a newly registered user's forum role to bbpkeymaster without proper authentication. This occurred because bbPress failed to implement adequate CSRF protections when assigning forum roles, allowing an attacker to craft a malicio...
CVE-2024-21461
Memory corruption while performing finish HMAC operation when context is freed by keymaster...
CVE-2024-23355
Memory corruption when keymaster operation imports a shared key...
CVE-2024-51809
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in intelligentDesign Keymaster Chord Notation Free keymaster-chord-notation-free allows Stored XSS.This issue affects Keymaster Chord Notation Free: from n/a through = 1.0.2...
CVE-2024-51809 WordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in intelligentDesign Keymaster Chord Notation Free keymaster-chord-notation-free allows Stored XSS.This issue affects Keymaster Chord Notation Free: from n/a through = 1.0.2...
CVE-2024-51809 WordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in intelligentDesign Keymaster Chord Notation Free keymaster-chord-notation-free allows Stored XSS.This issue affects Keymaster Chord Notation Free: from n/a through = 1.0.2...
CVE-2024-51809
CVE-2024-51809 involves a Stored XSS in the WordPress plugin Keymaster Chord Notation Free up to version 1.0.2, caused by improper input neutralization during web page generation. Public details confirm the issue affects Keymaster Chord Notation Free versions up to 1.0.2; no explicit exploitation...
WordPress plugin Keymaster Chord Notation Free 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...
PT-2024-34935 · Unknown · Keymaster Chord Notation Free
Name of the Vulnerable Software and Affected Versions: Keymaster Chord Notation Free versions 1.0.2 and earlier Description: The issue affects the Keymaster Chord Notation Free plugin, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to the...
WordPress Keymaster Chord Notation Free plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Keymaster Chord Notation Free versions = 1.0.2...
WordPress Keymaster Chord Notation Free Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
Software Keymaster Chord Notation Free Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51809 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2f14416fd283 Credits SOPROBRO Required privileg...
CVE-2024-23355
Memory corruption when keymaster operation imports a shared key...
CVE-2024-23355 Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption when keymaster operation imports a shared key...
CVE-2024-23355 Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption when keymaster operation imports a shared key...
PT-2024-19834 · Keymaster · Keymaster
Name of the Vulnerable Software and Affected Versions: Keymaster affected versions not specified Description: The issue is related to memory corruption that occurs when a keymaster operation imports a shared key. Recommendations: At the moment, there is no information about a newer version that...
CVE-2024-21461
Memory corruption while performing finish HMAC operation when context is freed by keymaster...