The vulnerability of the Thunderbird email client, related to errors in processing OpenPGP cryptographic signatures, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Thunderbird email client is related to errors in processing OpenPGP cryptographic signatures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of Thunderbird email client, related to incorrect verification of the OpenPGP cryptographic signature, allows attackers to gain access to protected information.

The vulnerability of the Thunderbird email client is related to an improper verification of the OpenPGP cryptographic signature. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

Remote code execution

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

CVE-2021-21353

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

GHSA-P493-635Q-R6GR Remote code execution via the `pretty` option.

Impact If a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remote code execution on the node.js backend. Patches Upgrad...

CVE-2021-21353: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the pretty option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was...

Pug 注入漏洞

Pug is Pug open source an application . Provides ways to optimize html. Pug has an injection vulnerability that can be exploited by an attacker to compile the pretty option of the compiler...

SAP Process Integration Information Disclosure Vulnerability

SAP Process Integration is SAP's Enterprise Application Integration EAI software for seamless integration between SAP and non-SAP applications in a company or with systems external to the company. An information disclosure vulnerability exists in SAP Process Integration 1.0. An attacker could...

WordPress Pretty-Link Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. A cross-site scripting vulnerability exists in WordPress Pretty-Link versi...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

Cross site scripting

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-4595

Pretty-Link WordPress plugin 1.5.2 has XSS...

CVE-2011-4595

CVE-2011-4595 concerns the Pretty-Link WordPress plugin. The vulnerability is a cross‑site scripting (XSS) flaw in the plugin’s language around the URL parameter of the pretty-bar.php script, allowing an attacker to inject arbitrary HTML/JavaScript into a user’s browser. Affected product/version:...

CVE-2011-4595: Improper Neutralization of Input During Web Page Generation

Pretty-Link WordPress plugin 1.5.2 has XSS...

PT-2020-7141

Name of the Vulnerable Software and Affected Versions Pretty-Link WordPress plugin version 1.5.2 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading ...

WordPress pretty-link plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogs using PHP language development guest platform. The platform supports setting up personal blog sites on PHP and MySQL servers. pretty-link is a plugin for adding hyperlinks to web pages. WordPress pretty-link plugin version 1.6.8 before the...

Sql injection

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::listlinks SQL injection via the group parameter...

CVE-2015-9457

CVE-2015-9457 : The WordPress "pretty-link" plugin (before 1.6.8) contains a SQL injection in PrliLinksController::list_links that is exploitable via the group parameter. Public sources in connected documents confirm this as an authenticated SQL injection vulnerability affecting Pretty Link plugi...

CVE-2015-9457

The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::listlinks SQL injection via the group parameter...

PT-2019-7416

Name of the Vulnerable Software and Affected Versions pretty-link plugin versions prior to 1.6.8 Description The issue concerns SQL injection via the group parameter in the PrliLinksController::list links function. This allows for potential exploitation. No information is provided about the...