11807 matches found
PT-2022-24186 · Unknown · Pop-Up Plugin
Name of the Vulnerable Software and Affected Versions: Pop-up plugin versions 1.1.5 and earlier Description: The issue is related to a Privilege Escalation vulnerability that affects subscribers and above, allowing potential escalation of privileges. Recommendations: For Pop-up plugin versions...
The vulnerability of the Mozilla Firefox browser, related to incorrect resource cleanup or release, allows a perpetrator to cause a service failure.
The vulnerability of the Mozilla Firefox browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions by opening multiple pop-up windows...
PT-2022-23629 · WordPress · Wp Shop
Name of the Vulnerable Software and Affected Versions: WP Shop plugin versions 3.9.6 and earlier Description: The issue concerns Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities. This allows for changes to plugin settings and deletion of data without proper authentication...
The vulnerability of the performance optimization tool of the HP Performance Tune-up software, a software solution for automated support and driver updates by HP Support Assistant, allows a hacker to execute arbitrary code.
The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Nagios XI 跨站脚本漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version v5.8.6, which stems from the discovery of a cross-site...
CVE-2022-36387 WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability
Broken Access Control vulnerability in Alessio Caiazza's About Me plugin = 1.0.12 at WordPress...
CVE-2022-2436
The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'filepackagedir' parameter in versions up to, and including 3.2.49. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper tha...
Privilege escalation in HP Support Assistant
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. HP strives to...
WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability
Privilege Escalation vulnerability was discovered by Tien Nguyen Anh Patchstack Alliance in the WordPress Pop-up plugin versions = 1.0.9. Solution Update the WordPress Pop-up plugin to the latest available version at least 1.1.6...
Pop-up < 1.1.6 - Arbitrary Settings Update via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
GHSA-76FG-MHRG-FMMG XNIO `notifyReadClosed` method logging message to unexpected end
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-0084
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-0084
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
Design/Logic Flaw
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-0084
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-0084
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...
CVE-2022-0084
CVE-2022-0084 affects XNIO: the notifyReadClosed path logs to the opposite end, enabling an attacker to send malformed requests that may cause log contention or disk space exhaustion. Connected docs confirm this root cause and cite IBM/Red Hat advisories linking the CVE to XNIO, with remediation ...
Ubuntu: Security Advisory (USN-124-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...