4130 matches found
CVE-2024-32338
A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module...
CVE-2024-32344
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
CVE-2024-32344: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
PT-2024-24523 · Cmsimple · Cmsimple
Name of the Vulnerable Software and Affected Versions: CMSimple version 5.15 Description: A cross-site scripting XSS vulnerability in the Settings menu allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
CVE-2024-32344
CMSimple version 5.15 is susceptible to a cross-site scripting (XSS) vulnerability within the Settings menu . The root cause is the lack of effective filtering and escaping of user-supplied data in the Edit parameter under the Language section . Attackers can exploit this by injecting a crafted p...
CVE-2024-32344
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
CVE-2024-32743
A cross-site scripting (XSS) vulnerability exists in the Settings section of WonderCMS v3.4.3 . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the SITE LANGUAGE CONFIG parameter within the Security module . To mitigate this risk, it is recommended to dis...
CVE-2024-32345
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section...
CVE-2024-32345: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section...
CVE-2024-32340
A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module...
PT-2024-24519 · Wondercms · Wondercms
Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: A cross-site scripting XSS vulnerability in the Settings section allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu...
CVE-2024-32338
WonderCMS version v3.4.3 is vulnerable to a cross-site scripting (XSS) flaw within the Settings section. The root cause is the improper neutralization of input, specifically when a crafted payload is injected into the PAGE TITLE parameter under the Current Page module. This allows an attacker to ...
CVE-2024-32744
WonderCMS v3.4.3 contains a cross-site scripting (XSS) vulnerability within its Settings section. The root cause is the improper neutralization of input in the PAGE KEYWORDS parameter under the CURRENT PAGE module. An attacker can exploit this by injecting a crafted payload to execute arbitrary w...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 security update on RHEL 9
New Red Hat Single Sign-On 7.6.8 deliverables are now available for Red Hat Enterprise Linux 9. This is an enhancement and security update with Important impact rating and package name 'rh-sso7-keycloak'. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
US Senate to Vote on a Wiretap Bill That Critics Call ‘Stasi-Like’
A controversial bill reauthorizing the Section 702 spy program may force whole new categories of businesses to eavesdrop on the US government’s behalf, including on fellow Americans...
shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...
shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...
Important: Red Hat Security Advisory: squid:4 security update
An update for the squid:4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this...
PT-2024-3079
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.60 Description The issue is related to insufficient data validation in the Downloads section of Google Chrome, allowing a remote attacker to perform UI spoofing via a crafted HTML page. This could...
Server-Side Request Forgery (SSRF)
mautic/core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to a flaw in the Asset section, an authenticated user could read system files and access the internal addresses of the application...