WordPress Website File Changes Monitor plugin <= 1.8.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Nicolas VIDAL TEHTRIS in WordPress Website File Changes Monitor plugin versions = 1.8.2. Solution Update the WordPress Website File Changes Monitor plugin to the latest available version at least 1.8.3...

CVE-2022-0088

Cross-Site Request Forgery CSRF in GitHub repository yourls/yourls prior to 1.8.3...

GHSA-48RH-QGJR-XFJ6 Improper Neutralization of Input During Web Page Generation in Jsoup

Cross-site scripting XSS vulnerability in jsoup before 1.8.3...

CVE-2022-0088

Cross-Site Request Forgery CSRF in GitHub repository yourls/yourls prior to 1.8.3...

CVE-2022-0088 Cross-Site Request Forgery (CSRF) in yourls/yourls

Cross-Site Request Forgery CSRF in GitHub repository yourls/yourls prior to 1.8.3...

UBUNTU-CVE-2020-21548

Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c...

libsixel 缓冲区错误漏洞

libsixel is a SIXEL encoder/decoder implementation. a heap buffer overflow vulnerability exists in the sixelencodehighcolor function in tosixel.c in Libsixel version 1.8.3. No detailed vulnerability details are currently available...

[SECURITY] [DSA 4919-1] lz4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4919-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 21, 2021 https://www.debian.org/security/faq -...

CVE-2020-22781

In Etherpad 1.8.3, a specially crafted URI would raise an unhandled exception in the cache mechanism and cause a denial of service crash the instance...

CVE-2020-18019

SQL Injection in Xinhu OA System v1.8.3 allows remote attackers to obtain sensitive information by injecting arbitrary commands into the "typeid" variable of the "createfolderAjax" function in the "modeworcAction.php" component...

Etherpad-Lite 安全漏洞

Etherpad-Lite is a Web-based open source document editor from the Etherpad Foundation. A security vulnerability exists in Etherpad-Lite versions prior to 1.8.3 that stems from the effects of a missing lock check and can be exploited by an attacker to cause a denial of service...

WordPress 插件 SQL注入漏洞

WordPress Plugin is an open source application plugin for WordPress. plugin for WordPress. WordPress Plugin eLearning and online course solution before 1.8.3 suffers from a SQL injection vulnerability that stems from susceptibility to federation-based SQL injection attacks...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. eLearning and online course solution WordPress plugin before 1.8.3 suffers from a SQL injection vulnerability that...

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

The tutoransweringquizquestion/getanswerbyid function pair from the plugin was vulnerable to UNION based SQL injection that could be exploited by students. POST /courses/first-class/tutorquiz/test/ HTTP/1.1 Host: URL Content-Length: 413 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin...

Update jQuery to avoid CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251

Crowd was using jQuery version 1.8.3, which is affected by CVE-2020-11023, CVE-2020-11022, and CVE-2015-9251. Affected Version/s: 4.0.3, 4.1.1 Fixed Version/s: 4.1.2, 4.0.4, 4.2.0...

Docker Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

WordPress NotificationX plugin <= 1.8.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress NotificationX plugin versions = 1.8.2. Solution Update the WordPress NotificationX plugin to the latest available version at least 1.8.3...

CVE-2019-16097:Harbor privilege elevation vulnerability alerts-a vulnerability alert-the black bar safety net

2019 9 May 19, 360CERT observed abroad security researcher Aviv Sasson found Harbor there is elevation of Privilege Vulnerability, the Harbor in the default configuration register the function is open, the attacker can register functions using the vulnerability to gain administrator privileges...

Exploit for Missing Authorization in Linuxfoundation Harbor

CVE-2019-16097 This program is intended only for security...

rdesktop Numeric Error Vulnerability

rdesktop is an open source remote desktop client program. A security vulnerability exists in rdesktop 1.8.3 and earlier versions. No details of the vulnerability are provided at this time...