CVE-2023-27455

CVE-2023-27455 is an unauthenticated, reflected XSS in the WordPress plugin “Update Image Tag Alt Attribute” up to version 2.4.5. Public references confirm the vulnerability affects this plugin and versions ≤ 2.4.5, with a CVSS base score around 6.1 (NVD) and higher in PatchStack data. The issue ...

CVE-2023-27455 WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Maui Marketing Update Image Tag Alt Attribute plugin = 2.4.5 versions...

Security fix for the ALT Linux 10 package wireshark version 4.0.5-alt1

4.0.5-alt1 built May 9, 2023 Anton Farygin in task 319886 May 4, 2023 Anton Farygin - 4.0.5 - Fixes: CVE-2023-1994 GQUIC dissector crash. CVE-2023-1993 LISP dissector large loop. CVE-2023-1992 RPCoRDMA dissector crash. CVE-2023-1161 ISO 15765 and ISO 10681 dissector crash...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.3.1.946-alt1

23.3.1.946-alt1 built May 4, 2023 Yandex Browser Team in task 319296 April 25, 2023 Yandex Browser Team - Browser updated to 23.3.1.946 + Critical CVE-2023-2033: Type confusion in V8...

Security fix for the ALT Linux 10 package golang version 1.19.9-alt1

1.19.9-alt1 built May 3, 2023 Alexey Shabalin in task 319734 May 2, 2023 Alexey Shabalin - New version 1.19.9 Fixes: CVE-2023-24539, CVE-2023-24540, CVE-2023-29400...

Security fix for the ALT Linux 10 package git version 2.33.8-alt1

2.33.8-alt1 built May 2, 2023 Dmitry V. Levin in task 319522 April 17, 2023 Dmitry V. Levin - 2.33.7 - 2.33.8 fixes: CVE-2023-25652, CVE-2023-25815, CVE-2023-29007...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2021.8.22-alt2

2:2021.8.22-alt2 built April 21, 2023 Andrey Cherepanov in task 318846 Nov. 8, 2022 Alexander Danilov - Fixes CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789, CVE-2022-40284...

Security fix for the ALT Linux 9 package adcli version 0.9.2-alt1

0.9.2-alt1 built April 21, 2023 Evgeny Sinelnikov in task 314224 Oct. 17, 2022 Evgeny Sinelnikov - Add support LDAP add/mod operation to set/change password: + fix unable to join to active directory after KB5008380/CVE-2021-42287 with option '--ldap-passwd'; +...

Security fix for the ALT Linux 10 package runc version 1.1.5-alt1

1.1.5-alt1 built April 20, 2023 Alexander Danilov in task 318394 April 4, 2023 Vladimir Didenko - New version Fixes: CVE-2023-25809, CVE-2023-27561, CVE-2023-28642...

Update Image Tag Alt Attribute <= 2.4.5 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Update Image Tag Alt Attribute Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27455 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ba6000222dd7 Credits...

Security fix for the ALT Linux 10 package etcd version 3.5.8-alt1

3.5.8-alt1 built April 17, 2023 Alexey Shabalin in task 317882 April 14, 2023 Alexey Shabalin - 3.5.8 Fixes: CVE-2021-28235...

Linux Client Shortcut Key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete in Linux VDA

Normally, Ctrl+Alt+Enter from a Windows Client will change xfreerdp from "Window Mode" to "Full Screen" and vice versa in a Linux VDA's ICA session. However, on a Linux Client the same shortcut key Ctrl+Alt+Enter will work as Ctrl+Alt+Delete to the application xfreerdp in a Linux VDA's ICA sessio...

Security fix for the ALT Linux 10 package samba version 4.16.10-alt1

4.16.10-alt1 built April 14, 2023 Evgeny Sinelnikov in task 317735 March 29, 2023 Evgeny Sinelnikov - Update to security release of Samba 4.16 with update libldb to 2.5.3: + ldb wildcard matching makes excessive allocations Samba15331. - Security fixes Samba15270, Samba15315: + CVE-2023-0922: The...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.3.1.916-alt1

April 11, 2023 Yandex Browser Team 23.3.1.916-alt1 - Browser updated to 23.3.1 + Critical CVE-2023-0941: Use after free in Prompts. + High CVE-2023-0927: Use after free in Web Payments API. + High CVE-2023-0928: Use after free in SwiftShader. + High CVE-2023-0929: Use after free in Vulkan. + High...

Security fix for the ALT Linux 9 package gzip version 1.10-alt1.p9.1

1.10-alt1.p9.1 built April 10, 2023 Andrey Cherepanov in task 316771 April 4, 2023 Andrey Cherepanov - Fixed CVE-2022-1271 ALT 44053...

Security fix for the ALT Linux 10 package golang version 1.19.8-alt1

1.19.8-alt1 built April 10, 2023 Alexey Shabalin in task 318045 April 4, 2023 Alexey Shabalin - New version 1.19.8 Fixes: CVE-2023-24534, CVE-2023-24536, CVE-2023-24537, CVE-2023-24538...

Security fix for the ALT Linux 10 package libsixel version 1.10.3-alt1

1.10.3-alt1 built April 7, 2023 Konstantin Lepikhov in task 317774 March 30, 2023 Konstantin Lepikhov - 1.10.3. - switch to meson. - Security fixes for CVE-2020-11721, CVE-2020-19668...

Security fix for the ALT Linux 10 package libmicrohttpd version 0.9.76-alt1

0.9.76-alt1 built April 6, 2023 Alexander Danilov in task 317701 March 29, 2023 Sergey Bolshakov - 0.9.76 released fixes: CVE-2023-27371...

Security fix for the ALT Linux 10 package xorg-server version 2:1.20.14-alt8

2:1.20.14-alt8 built April 5, 2023 Valery Inozemtsev in task 317705 March 29, 2023 Valery Inozemtsev - cherry pick upstream fixes for CVE-2023-1393...