281 matches found
CVE-2023-31094
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin = 2.4.0 versions...
Newsletter 跨站脚本漏洞
Newsletter is a one-click bulk email solution. SimplePHPscripts NewsLetter Script A cross-site scripting vulnerability exists in PHP version 2.4, which stems from a problem with the file /preview.php that can lead to cross-site scripting...
XWiki Platform 代码注入漏洞
XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform version 2.4-m-2 and prior versions, which originates from a vulnerability that allows a user with view rights to a documen...
PT-2023-12457 · WordPress · The Ultimate Gdpr & Ccpa
Name of the Vulnerable Software and Affected Versions: The Ultimate GDPR & CCPA plugin for WordPress versions up to, and including, 2.4 Description: The issue allows unauthenticated attackers to import and export settings via the export settings and import settings functions. This enables them to...
DEBIAN-CVE-2023-32324
OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...
WordPress plugin Wp-D3 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
SUSE-SU-2023:2046-1 Security update for openssl-ibmca
This update for openssl-ibmca fixes the following issues: Upgraded openssl-ibmca to version 2.4.0 bsc1210058 - Provider: Adjustments for OpenSSL versions 3.1 and 3.2 - Provider: Support RSA blinding - Provider: Constant-time fixes for RSA PKCS1 v1.5 and OAEP padding - Provider: Support 'implicit...
ATEN International PE8108 安全漏洞
The ATEN International PE8108 is an intelligent PDU from China-based ATEN International. A security vulnerability exists in ATEN International PE8108 version 2.4.232, which stems from incorrect access control...
WordPress plugin Simple Giveaways 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
MISP 跨站脚本漏洞
MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.169. An attacker exploited...
Intel SUR 输入验证错误漏洞
Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR software prior to version 2.4.8902, which stems from incorrect validation of user input. An attacker could exploit the vulnerability to escalate privileges...
SUSE CVE-2005-3252
Stack-based buffer overflow in the Back Orifice BO preprocessor for Snort before 2.4.3 allows remote attackers to execute arbitrary code via a crafted UDP packet...
SUSE CVE-2010-2080
Multiple cross-site scripting XSS vulnerabilities in Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
SUSE CVE-2012-1144
FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via a crafted TrueType font...
SUSE CVE-2015-3310
Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service crash via a start accounting message to the RADIUS server...
SUSE CVE-2015-4146
The EAP-pwd peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not clear the L Length and M More flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service crash via a crafted message...
SUSE CVE-2015-5186
Audit before 2.4.4 in Linux does not sanitize escape characters in filenames...
SUSE CVE-2019-9499
The implementations of EAP-PWD in wpasupplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection...
SUSE CVE-2021-41146
qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a qutebrowserurl: URL handler. With certain applications, opening a specially crafted qutebrowserurl:... URL can lead to execution of...