7575 matches found
AMD Ryzen Master™ SDK August 2023 Security Update
AMD has informed HP of potential security vulnerabilities identified in the AMD® Ryzen Master™ SDK, which might allow arbitrary code execution, denial of service, or information disclosure. AMD has released software updates to mitigate the potential vulnerabilities. AMD has released updates to...
PT-2023-8887 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev617-g671976fcc-master Description: The issue is related to a memory leak in the extract attributes function, located in media tools/m3u8.c:329, which can lead to a denial of service. This is due to the lack of memory...
CVE-2023-38314
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthenticated that can be triggered with a crafted GET HTTP request with a missing redirect query string parameter. Triggering this issue results in crashing OpenNDS a Denial-of-Servic...
PT-2023-30717 · Unknown · Terramaster
Name of the Vulnerable Software and Affected Versions: TerraMaster versions v.s1.0 through v.2.295 Description: The issue allows a remote attacker to obtain sensitive information via a crafted GET request. This is a Directory Traversal vulnerability, which enables access to files and directories...
CVE-2023-47512
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...
CVE-2023-47512
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...
CVE-2023-47508
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Averta Master Slider Pro plugin = 3.6.5 versions...
CVE-2023-47508
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Averta Master Slider Pro plugin = 3.6.5 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Averta Master Slider Pro plugin = 3.6.5 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Gravity Master Product Enquiry for WooCommerce plugin = 3.0 versions...
CVE-2023-47508
CVE-2023-47508 describes an unauthenticated reflected cross-site scripting (XSS) vulnerability in the Master Slider Pro WordPress plugin, affected versions
CVE-2023-47508 WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Averta Master Slider Pro plugin = 3.6.5 versions...
CVE-2023-47512
CVE-2023-47512 pertains to Gravity Master Product Enquiry for WooCommerce plugin (WordPress)
PT-2023-30475 · Woocommerce · Gravity Master Product Enquiry For Woocommerce
Name of the Vulnerable Software and Affected Versions: Gravity Master Product Enquiry for WooCommerce plugin versions prior to 3.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a...
WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.13 Fixed in 8.1.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47834 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f34de2f1d2a5 Credits emad Required privilege...
WordPress Plugin Master Slider Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-48013
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gffilterpacketdel function at /gpac/src/filtercore/filter.c...
CVE-2023-47384
MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gfisomaddchapter at /isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...