Ip-label Newtest 数据伪造问题漏洞

Ip-label Newtest is Ip-label's system for measuring the quality of critical applications from the end-user's perspective. A security vulnerability in Ip-label Newtest versions prior to v8.5R0, which stems from its Robot application's use of weak signature checking on binaries that are about to be...

Improper Neutralization of Equivalent Special Elements

Overview Affected versions of this package are vulnerable to Improper Neutralization of Equivalent Special Elements due to a possible HTML injection via deleting an account's API key that has a payload as its label. Remediation Upgrade BTCPayServer.Client to version 1.7.5 or higher. References -...

The vulnerability of the MPLS (Multi-Protocol Label Switching) technology implementation in JunOS operating systems allows a hacker to induce a service failure.

The vulnerability of the MPLS Multi-Protocol Label Switching technology implementation in JunOS lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted...

GSD-2023-1001156 NFSv4.2: Fix a memory stomp in decode_attr_security_label

NFSv4.2: Fix a memory stomp in decodeattrsecuritylabel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

WordPress MainWP White Label Extension Plugin <= 4.1.1 is vulnerable to Broken Access Control

Software MainWP White Label Extension Type Plugin Vulnerable versions = 4.1.1 Fixed in 4.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23748 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 4cf93d58a995 Credits Dave Jong...

CVE-2023-22407

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected...

CVE-2023-22398

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

PT-2023-9429

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc8 Description The vulnerability is related to the TCA MPLS LABEL attribute in the Linux kernel, which has an invalid combination of type NLA U32 and validation type NLA VALIDATE FUNCTION. This can trigger...

PT-2023-9441 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the Linux kernel's ice component, which can be exploited to cause a denial of service. The vulnerability is resolved by adding a...

WordPress White Label CMS Plugin < 2.5 PHP Object Injection Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:videousermanuals:whitelabelcms"; ifdescription...

CVE-2022-4302

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

CVE-2022-4302

The CVE-2022-4302 entry concerns the WordPress plugin White Label CMS prior to version 2.5. The Red Hat advisory confirms the issue: the plugin unserializes user input from Settings, which could allow high-privilege users (e.g., admins) to perform PHP Object Injection when a suitable gadget is pr...

CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

CVE-2022-4302: Undefined Security Weakness

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

WordPress plugin White Label CMS 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

PT-2023-2589 · Atlassian · Confluence

Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server versions prior to 7.13.15 Atlassian Confluence Server versions 7.14.0 through 7.19.7 Atlassian Confluence Server versions 7.20.0 through 8.2.0 Atlassian Confluence Data Center versions prior to 7.13.15 Atlassian...

Harvest Chosen 跨站脚本漏洞

Chosen is a Harvest open source library for making select boxes more user-friendly. A cross-site scripting vulnerability exists in versions prior to Chosen 1.8.6 that stems from incorrect manipulation of the parameter grouplabel resulting in cross-site scripting...

PT-2022-8060 · Unknown · Harvest Chosen

Name of the Vulnerable Software and Affected Versions: Harvest Chosen versions up to 1.8.6 Description: A problematic issue has been found in Harvest Chosen, affecting the AbstractChosen function of the file coffee/lib/abstract-chosen.coffee. The manipulation of the group label argument leads to...

CVE-2022-44643 Access policy with access to all tenants and using label selectors has more access

A vulnerability in the label-based access control of Grafana Labs Grafana Enterprise Metrics allows an attacker more access than intended. If an access policy which has label selector restrictions also has been granted access to all tenants in the system, the label selector restrictions will not ...