36 matches found
Sassy Social Share <= 3.3.3 - Cross-Site Scripting
The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...
sssd security update
2.12.0-3.0.1.el102.1 - Restore default debug level for ssscache Orabug: 32810448 2.12.0-3.1 - Resolves: RHEL-192056 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole - Resolves: RHEL-192064 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via...
EUVD-2025-17610
Malicious code in bioql PyPI...
CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0036: Incorrect Calculation
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
CVE-2025-0036
In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime post-boot cryptographic operations could cause data to be incorrectly written to and read from invalid locations as well as returning incorrect cryptographic data...
WordPress plugin Sassy Social Share 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
sss-ua.org Cross Site Scripting vulnerability OBB-3853377
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sss-ua.org Cross Site Scripting vulnerability OBB-3746107
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ubuntu 20.04 LTS : SSSD regression (USN-6156-2)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6156-2 advisory. USN-6156-1 fixed a vulnerability in SSSD. In certain environments, not all packages ended up being upgraded at the same time, resulting in authentication failures...
CVE-2021-39683
In copyfrommbox of sssiceutil.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
PT-2022-10968
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the copy from mbox function of sss ice util.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution...
PT-2021-22531
Name of the Vulnerable Software and Affected Versions: Sassy Social Share WordPress plugin version 3.3.23 Description: The issue arises from PHP Object Injection via the wp ajax heateor sss import config AJAX action, due to the deserialization of unvalidated user-supplied inputs via the import...
PT-2021-1165
Name of the Vulnerable Software and Affected Versions: SSSD versions 1.16.5-10.el7 9.7 Description: The System Security Services Daemon SSSD service is affected by several issues, including a wrong default debug level of sssd tools, missing secondary IPA Posix groups, failure to detect subdomain...
CVE-2020-7800
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot a...
Race condition
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot a...
CVE-2020-7802
CVE-2020-7802 affects the Synergy Systems & Solutions HUSKY RTU 6049-E70 with firmware versions 5.0 and earlier, where Incorrect Default Permissions (CWE-276) could let an attacker view network configurations via SNMP. The Red Hat entries corroborate the same product/version range for CVE-2020-78...
CVE-2020-7800
CVE-2020-7800 affects Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70 with firmware 5.0 and prior. Root cause: Improper Check for Unusual or Exceptional Conditions (CWE-754). Vulnerability exposes the device to specially crafted TCP packets that can cause shutdown/reboot and loss of configur...
CVE-2019-16879
The CVE-2019-16879 issue affects the Synergy Systems & Solutions HUSKY RTU 6049-E70 with firmware 5.0 and earlier. It is a Missing Authentication for Critical Function (CWE-306); the device does not require authentication for TELNET access, which could allow an attacker to change configurations o...