DEBIAN-CVE-2020-23911

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function defaulterrorlogger located in asn1fix.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2020-23911

An issue was discovered in asn1c through v0.9.28. A NULL pointer dereference exists in the function defaulterrorlogger located in asn1fix.c. It allows an attacker to cause Denial of Service...

asn1c 代码问题漏洞

asn1c is an ASN.1 compiler by the individual developer Lev Walkin. A security vulnerability exists in asn1c v0.9.28 and earlier versions, which stems from a NULL pointer dereference in the function defaulterrorlogger in asn1fix.c. An attacker can cause a denial of service by exploiting this...

PT-2023-11656

Name of the Vulnerable Software and Affected Versions asn1c versions prior to 0.9.29 Description An issue exists in the default error logger function located in asn1fix.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations For versions prior to...

CVE-2023-3166

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-3166

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

Cross site scripting

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-3166

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-3166

CVE-2023-3166 — Lana Email Logger (WordPress) Vulnerability: Stored XSS via the email subject due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts executed when users load affected pages. Affected: Lana Email Logger plugin for WordPress ...

WordPress Plugin Lana Email Logger 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

IBM DB2 Code Execution Vulnerability (CNVD-2023-58518)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a code execution vulnerability that originates from an unchecked logger...

PT-2023-23407 · WordPress · Lana Email Logger

Name of the Vulnerable Software and Affected Versions: Lana Email Logger plugin for WordPress versions up to, and including, the latest version Description: The issue is related to Stored Cross-Site Scripting via an email subject due to insufficient input sanitization and output escaping. This...

CVE-2023-3166: Improper Neutralization of Input During Web Page Generation

The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logger due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-27869

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27869

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

Design/Logic Flaw

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

IBM DB2 代码注入漏洞

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from a code execution vulnerability that originates from an unchecked logger...

Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1106 Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

CVE-2023-27869 IBM Db2 code execution

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...