DEBIAN-CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

CVE-2023-0049

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143...

CVE-2023-0054

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

CVE-2023-0054

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145...

CVE-2022-2743

Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. Chrome security severity: High...

WordPress plugin LetsRecover SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2023-7671 · WordPress · Cryptocurrency Widgets Pack

Name of the Vulnerable Software and Affected Versions: Cryptocurrency Widgets Pack WordPress plugin versions prior to 2.0 Description: The issue is related to a lack of sanitization and escaping of some parameters before using them in SQL statements via an AJAX action. This can lead to SQL...

Kiwi TCMS 安全漏洞

Kiwi TCMS is a leading open source test management system for manual and automated testing from Kiwi TCMS Open Source. A security vulnerability exists in Kiwi TCMS version 11.6 and prior versions, which stems from the fact that when a user registers for a new account or changes their password,...

PT-2023-7909 · WordPress · Wp-Ban

Name of the Vulnerable Software and Affected Versions: WP-Ban WordPress plugin versions prior to 1.69.1 Description: The issue is related to the WP-Ban WordPress plugin not sanitizing and escaping some of its settings, which could allow high privilege users, such as admins, to perform Stored...

PT-2023-14347 · Unknown · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker versions prior to 1.16.9 Description: The issue concerns a lack of validation and escaping of a shortcode attribute, potentially allowing users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...

PT-2023-13913 · WordPress · The Joy Of Text Lite

Name of the Vulnerable Software and Affected Versions: The Joy Of Text Lite WordPress plugin versions prior to 2.3.1 Description: The issue arises from the plugin's failure to properly sanitise and escape certain parameters before using them in SQL statements, which are accessible to...

GHSA-6GWX-GW56-QHF7 Froxlor vulnerable to Cross-Site Request Forgery

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.1, which stems from stored cross-site scripting XSS...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos versions prior to 0.9.1, which stems from stored cross-site scripting XSS...

GHSA-5JQP-WMHJ-G33F usememos/memos Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos 0.9.0 and prior...

CVE-2022-4841

Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...

memos 跨站脚本漏洞

memos is an open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in versions of memos prior to 0.9.1. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-4849 Cross-Site Request Forgery (CSRF) in usememos/memos

Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos

Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...

memos 跨站脚本漏洞

memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.9.1 contain a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform cross-site scripting attacks...