GSD-2022-1001761 ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()

ubifs: Fix read out-of-bounds in ubifswbufwritenolock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

Input validation

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

Rethinking Cyber-Defense Strategies in the Public-Cloud Age

The pandemic has fast-tracked migration to the public cloud, including Amazon Web Services, Google Compute Platform and Microsoft Azure. But the journey hasn’t exactly been smooth as silk: The great migration has brought a raft of complex security challenges, which have led to headline-grabbing...

WordPress WP Maintenance plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

CVE-2021-36828

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

CVE-2021-36828

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

Cross site scripting

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

CVE-2021-36828

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

CVE-2021-36828

CVE-2021-36828 affects the WordPress WP Maintenance plugin, with an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in versions up to 6.0.7. The issue involves multiple inputs not being properly sanitized, enabling XSS by privileged users. Several sources (NVD/NIST, CVE rec...

CVE-2021-36828 WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

WordPress plugin WP Maintenance 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

WP Maintenance < 6.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape multiple of its settings, which could allow high privileged users such as admin to perform Cross-Site Scripting attack when the unfilteredhtml is disallowed...

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands...

CVE-2021-36828: Improper Neutralization of Input During Web Page Generation

Authenticated admin+ Stored Cross-Site Scripting XSS in WP Maintenance plugin = 6.0.7 versions...

PT-2022-10567 · WordPress · Wp Maintenance

Name of the Vulnerable Software and Affected Versions: WP Maintenance plugin versions prior to 6.0.8 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS in the WP Maintenance plugin. This affects multiple inputs and can be exploited by authenticated administrator...

WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas Patchstack Alliance in WordPress WP Maintenance plugin versions = 6.0.7. Solution Update the WordPress WP Maintenance plugin to the latest available version at least 6.0.8...

CVE-2022-0023

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle MITM to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to...

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle MITM to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to...

USN-5378-4 gzip vulnerability

USN-5378-1 fixed a vulnerability in Gzip. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Cleemy Desu Wayo discovered that Gzip incorrectly handled certain filenames. If a user or automated system were tricked into performing zgrep...