670 matches found
OPENSUSE-SU-2021:4063-1 Security update for icu.691
This update for icu.691 fixes the following issues: - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. jscSLE-17893 - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' - Update to release 69.1 - For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as...
CVE-2020-22079
Stack-based buffer overflow in Tenda AC-10U AC1200 Router USAC10UV1.0RTLV15.03.06.48multiTDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg...
ALBA-2021:4003 tzdata bug fix and enhancement update
The tzdata packages contain data files with rules for various time zones. The tzdata packages have been updated to version 2021e, which addresses recent time zone changes. Notably: The Pacific/Fiji timezone has suspended daylight saving time DST for the 2021/2022 season. The 'zic -r' command now...
tzdata bug fix and enhancement update
The tzdata packages contain data files with rules for various time zones. The tzdata packages have been updated to version 2021e, which addresses recent time zone changes. Notably: The Pacific/Fiji timezone has suspended daylight saving time DST for the 2021/2022 season. The 'zic -r' command now...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...
PT-2021-1193
Name of the Vulnerable Software and Affected Versions: tzdata versions prior to 2021e Description: The tzdata packages have been updated to address recent time zone changes, including the suspension of daylight saving time in the Pacific/Fiji timezone for the 2021/2022 season, changes to the 'zic...
tzdata bug fix and enhancement update
An update is available for tzdata. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tzdata packages contain data files with rules for various time zones. The...
CVE-2021-24671
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2021-24671
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
Cross site scripting
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2021-24671
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
CVE-2021-24671 MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
PT-2021-16182
Name of the Vulnerable Software and Affected Versions MX Time Zone Clocks WordPress plugin versions prior to 3.4.1 Description The issue allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks due to the lack of escaping of the time zone attribute in the...
CVE-2021-24671: Improper Neutralization of Input During Web Page Generation
The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...
WordPress 插件 跨站脚本漏洞
WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin MX Time Zone Clocks, which stems from the fact that versions of the MX Time Zone Clocks WordPress plugin prior to version 3.4.1 do not escape the time zone...
WordPress MX Time Zone Clocks plugin <= 3.4 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress MX Time Zone Clocks plugin versions = 3.4. Solution Update the WordPress MX Time Zone Clocks plugin to the latest available version at least 3.4.1...
MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting
The plugin does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks PoC mxmtzctimezoneclocks timezone='"+alertXSS-timezone+"'...
MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting
The plugin does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks mxmtzctimezoneclocks timezone='"+alertXSS-timezone+"'...
SUSE: Security Advisory (SUSE-SU-2012:0055-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...