WordPress WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress WP Songbook versions = 2.0.11. Solution This plugin has been closed as of August 12, 2021 and is not available for download. This closure is temporary, pending a full review...

Vault’s Integrated Storage Backend Database File May Have Excessively Broad Permissions

Summary When initializing Vault’s Integrated Storage backend, excessively broad filesystem permissions may be set for the underlying Bolt database used by Vault’s Raft implementation. This vulnerability, CVE-2021-38553, was fixed in Vault 1.8.0. Background Vault’s Integrated Storage was introduce...

Site Reviews < 5.13.1 - Authenticated Stored XSS

The plugin does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfilteredhtml is disallowed PoC As an admin, create a review via the Admin dashboard /wp-admin/post-new.php?posttype=site-review and a...

WordPress Border Loading Bar plugin <= 1.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by iohex and WPScanTeam in WordPress Border Loading Bar plugin versions = 1.0.1. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

Site Reviews < 5.13.1 - Authenticated Stored XSS

The plugin does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfilteredhtml is disallowed As an admin, create a review via the Admin dashboard /wp-admin/post-new.php?posttype=site-review and add t...

The vulnerability of the implementation of syntactic analysis for DWF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the syntax analysis implementation for DWF file formats in the Autodesk Design Review software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by opening malicious...

Apple Releases Security Updates

Apple has released security updates to address a vulnerability in multiple products. An attacker could exploit this vulnerability to take control of an affected device. CISA encourages users and administrators to review the security update page for the following products and apply the necessary...

 Cisco Releases Security Updates

Cisco has released security updates to address multiple vulnerabilities in Intersight Virtual Appliance. An attacker could exploit these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA...

Adobe Releases Security Updates for Multiple Products 

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

Autodesk Design Review Type Obfuscation Vulnerability

Autodesk Design Review ADR is a suite of AutoCAD drafting software support software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a type obfuscation vulnerability that could b...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53944)

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.A buffer overflow vulnerability exists in Autodesk Design Review, which stems from a...

WordPress Current Book plugin <= 1.0.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Vikas Srivastava in WordPress Current Book plugin versions = 1.0.1. Solution This plugin has been closed as of July 15, 2021 and is not available for download. This closure is temporary, pending a full review...

Mozilla Releases Security Updates for Firefox, Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisory for Firefox 90...

The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the PDF syntax analysis implementation in the Autodesk Design Review software relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the PDF syntax analysis implementation of the Autodesk Design Review software relates to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the implementation of syntactic analysis for PDF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the PDF syntax analysis implementation in the Autodesk Design Review software for applying electronic annotations is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the implementation of syntactic analysis for TGA format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the implementation of syntax analysis for PICT format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the PICT file syntax analysis implementation in the Autodesk Design Review software lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

 Adobe Releases Security Updates for Multiple Products 

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Adobe’s Security Bulletins and apply the necessary updates...

The vulnerability of the implementation of syntax analysis for TIF format files in the Autodesk Design Review software allows a perpetrator to execute arbitrary code.

The vulnerability of the TIF file syntax analysis implementation in the Autodesk Design Review software relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...