668 matches found
CVE-2021-24239
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...
Cross site scripting
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...
CVE-2021-24239
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...
CVE-2021-24239 Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...
PT-2021-15782
Name of the Vulnerable Software and Affected Versions The Pie Register – User Registration Forms plugin versions prior to 3.7.0.1 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the invitaion code GET parameter is not properly sanitized when it is...
CVE-2021-24239: Improper Neutralization of Input During Web Page Generation
The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...
openSUSE: Security Advisory for bcc (openSUSE-SU-2021:0535-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : bcc (openSUSE-2021-535)
This update for bcc fixes the following issues : - Enabled PIE for bcc-lua if lua support is enabled bsc1183399 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
OPENSUSE-SU-2021:0542-1 Security update for tpm2-tss-engine
This update for tpm2-tss-engine fixes the following issues: - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 This update was...
Security update for bcc (moderate)
openSUSE Security Update: Security update for bcc Announcement ID: openSUSE-SU-2021:0535-1 Rating: moderate References: 1183399 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for bcc fixes the following issues:- Enabled...
PT-2021-27339
Name of the Vulnerable Software and Affected Versions: tpm2-tss-engine affected versions not specified Description: The issue with tpm2-tss-engine is related to compilation flags. Specifically, the problem arose because fixed compilation flags resulted in a non-position-independent executable...
OPENSUSE-SU-2021:0535-1 Security update for bcc
This update for bcc fixes the following issues: - Enabled PIE for bcc-lua if lua support is enabled bsc1183399 This update was imported from the SUSE:SLE-15-SP2:Update update project...
PT-2021-27337
Name of the Vulnerable Software and Affected Versions: bcc affected versions not specified Description: The issue concerns the bcc software, where PIE was not enabled for bcc-lua when lua support is enabled. This has been fixed in an update. Recommendations: At the moment, there is no information...
CVE-2021-25357
A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...
SUSE SLED15 / SLES15 Security Update : tpm2-tss-engine (SUSE-SU-2021:1113-1)
This update for tpm2-tss-engine fixes the following issues : Added support to disable fixed compilation flags Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 Note that Tenable...
SUSE-SU-2021:1113-1 Security update for tpm2-tss-engine
This update for tpm2-tss-engine fixes the following issues: - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895...
Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)
The plugin does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue. https://example.com/wp-admin/admin.php?page=prnewregistrationform&showdashwidget=1&invitaioncode=PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4=...
Pie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)
The plugin does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue. PoC https://example.com/wp-admin/admin.php?page=prnewregistrationformdashwidget=1code=PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4=...
CVE-2017-1000253
A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable PIE, the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory...
Cross-site Scripting (XSS) - Generic in alibaba/bizcharts
Description bizcharts is vulnerable to Cross-Site Scripting XSS. Steps To Reproduce-: 1. Open NPM repo https://www.npmjs.com/package/bizcharts 2. Open the demo https://bizcharts.net/product/BizCharts4/gallery 3. Select any chartI used pie chart Ex: https://bizcharts.net/product/BizCharts4/demo/37...