3028 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.2 versions...
CVE-2023-25046 WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.2 versions...
CVE-2023-25046
The CVE-2023-25046 affects the WordPress Podlove Podlove Podcast Publisher plugin up to version 3.8.2. It is a Stored XSS vulnerability exploitable by users with admin+ authentication. The issue is addressed in version 3.8.3 (patch available). No exploitation details are provided in the sources b...
CVE-2023-25046 WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Podlove Podlove Podcast Publisher plugin = 3.8.2 versions...
WordPress Plugin Podlove Podcast Publisher 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-19894 · WordPress · Podlove Podcast Publisher
Name of the Vulnerable Software and Affected Versions: Podlove Podcast Publisher plugin versions prior to 3.8.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker to inje...
New Rilide Malware Targeting Chromium-Based Browsers to Steal Cryptocurrency
Chromium-based web browsers are the target of a new malware calledRilide that masquerades itself as a seemingly legitimate extension to harvest sensitive data and siphon cryptocurrency. "Rilide malware is disguised as a legitimate Google Drive extension and enables threat actors to carry out a...
WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure
Software Libsyn Publisher Hub Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.4.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-25057 Patch priority Low CVSS severity Low 5.3 Developer Libsyn PSID a56bf7f3b3e9 Credits yuyudhn Required privilege...
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control PerfPublisher report files to have Jenkins parse a crafted XML document that uses external entities for extraction of secrets...
CVE-2023-28682
Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2023-28682
Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2019-8963
A Denial of Service DoS vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool...
CVE-2019-8963
A Denial of Service DoS vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool...
Denial of service
A Denial of Service DoS vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool...
FlexNet Publisher 安全漏洞
Flexera FlexNet Publisher FLEXlm is a licensing relationship management solution Entitlement Relationship Management Solution in the United States Flexera company's core software license management components. The product provides software and hardware manufacturers with the ability to price,...
CVE-2019-8963
Summary : CVE-2019-8963 is a DoS in FlexNet Publisher’s lmadmin 11.16.5. The vulnerability arises when a crafted POST request to the web-based lmadmin tool triggers a resource-release error, leading to availability impact. The issue is documented across multiple sources including Red Hat and NVD,...
CVE-2019-8963
A Denial of Service DoS vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool...
CVE-2019-8963
A Denial of Service DoS vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool...
CVE-2023-28682
CVE-2023-28682 affects Jenkins Performance Publisher Plugin 8.09 and earlier. The root cause is that the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks, allowing crafted PerfPublisher report files to be parsed in a way that can disclose secrets from the Jenkins...