89 matches found
CVE-2023-41672 WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
CVE-2023-41672
CVE-2023-41672 relates to a CSRF vulnerability in the WordPress plugin Hide admin notices – Admin Notification Center (
WordPress Plugin Hide admin notices - Admin Notification Center Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Hide admin notices - Admin Notification...
CVE-2023-41672: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Rémi Leclercq Hide admin notices – Admin Notification Center plugin = 2.3.2 versions...
WordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Hide admin notices – Admin Notification Center Type Plugin Vulnerable versions = 2.3.2 Fixed in 2.3.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-41672 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...
Mail.ru: read new emails from any inbox IOS APP in notification center
IDOR vulnerability in notification center API as used by Mail.ru Mail application for iOS allowed to request notifications for arbitrary e-mail address...
Synology Calendar Cross-Site Scripting Vulnerability
Synology Calendar is a file protection program from Synology that runs on Synology NAS devices.Notification Center is one of the system notification components. A cross-site scripting vulnerability exists in Notification Center in Synology Calendar versions prior to 2.1.1-0502. A remote attacker...
Cross site scripting
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
CVE-2018-8915
The CVE concerns Synology Calendar’s Notification Center where an XSS vulnerability exists in the title parameter for versions before 2.1.1-0502. Remote authenticated users can inject arbitrary web script or HTML by supplying a crafted title, potentially impacting user sessions or data displayed ...
CVE-2018-8915
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
CVE-2018-8915: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter...
Self-destructing messages received on 'Signal for Mac' can be recovered later
It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing self-destructing messages from the recipient's system, leaving the content of your sensitive messages at risk of getting exposed. For those unaware, the disappearing...
Self-destructing messages received on 'Signal for Mac' can be recovered later
It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing self-destructing messages from the recipient's system, leaving the content of your sensitive messages at risk of getting exposed. For those unaware, the disappearing...
Apple iOS < 9.1 Multiple Vulnerabilities
Binary data 9328.prm...
The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information
The vulnerability of the Notification Center component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to gain access to protected information by viewing notifications of calls and messages displayed on...
CVE-2015-7000
Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a 1 Phone or 2 Messages notification on the lock screen soon after a setting was disabled...
Design/Logic Flaw
Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a 1 Phone or 2 Messages notification on the lock screen soon after a setting was disabled...