CLSA-2023-1692296134 Update of alt-php

SECURITY UPDATE: New microcode data file 2023-05-12 - New microcodes: sig 0x000906a4, pfmask 0x40, 2022-10-12, rev 0x0004, size 115712 sig 0x000b06e0, pfmask 0x01, 2022-12-19, rev 0x0010, size 134144 - Updated microcodes: sig 0x00050653, pfmask 0x97, 2022-12-21, rev 0x1000171, size 36864 sig...

PT-2023-5504 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.11.1 and below Description: A Cross-site scripting XSS vulnerability in the Custom Logo component allows authenticated attackers to inject arbitrary javascript or HTML via the alt-text field. This affects all pages...

OESA-2023-1443 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: libcurl can be told to save cookie, HSTS and/or alt-svc data to files. When doing this, it called stat followed by fopen in a way that made it...

WordPress Plugin Bulk edit image alt tag, caption & description 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Bulk edit image alt tag,...

WordPress Alt Manager Plugin < 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Alt Manager Type Plugin Vulnerable versions 1.5.7 Fixed in 1.5.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5d5816be5174 Credits Rafie Muhammad Patchstack Required...

alt-bau-neu.de Cross Site Scripting vulnerability OBB-3472253

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability in the implementation of the Kerberos network protocol on Debian GNU/Linux, Red Hat Enterprise Linux, Ubuntu, Fedora, and Alt 8 SP operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Kerberos network protocol implementation in Debian GNU/Linux, Red Hat Enterprise Linux, Ubuntu, Fedora, and Alt 8 SP is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

alt-bau-neu.de Cross Site Scripting vulnerability OBB-3406906

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CLSA-2023-1684824309 Update of alt-php

Universal build for Ubuntu/Debian...

CLSA-2023-1684823891 Update of alt-php

Universal build for Ubuntu/Debian...

Photo Gallery by Ays < 5.1.7 - Reflected XSS

The plugin does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open one of the URLs below v 5.1.7 -...

CVE-2023-27455 WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Maui Marketing Update Image Tag Alt Attribute plugin = 2.4.5 versions...

CVE-2023-27455

CVE-2023-27455 is an unauthenticated, reflected XSS in the WordPress plugin “Update Image Tag Alt Attribute” up to version 2.4.5. Public references confirm the vulnerability affects this plugin and versions ≤ 2.4.5, with a CVSS base score around 6.1 (NVD) and higher in PatchStack data. The issue ...

Security fix for the ALT Linux 10 package wireshark version 4.0.5-alt1

4.0.5-alt1 built May 9, 2023 Anton Farygin in task 319886 May 4, 2023 Anton Farygin - 4.0.5 - Fixes: CVE-2023-1994 GQUIC dissector crash. CVE-2023-1993 LISP dissector large loop. CVE-2023-1992 RPCoRDMA dissector crash. CVE-2023-1161 ISO 15765 and ISO 10681 dissector crash...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.3.1.946-alt1

23.3.1.946-alt1 built May 4, 2023 Yandex Browser Team in task 319296 April 25, 2023 Yandex Browser Team - Browser updated to 23.3.1.946 + Critical CVE-2023-2033: Type confusion in V8...

Security fix for the ALT Linux 10 package golang version 1.19.9-alt1

1.19.9-alt1 built May 3, 2023 Alexey Shabalin in task 319734 May 2, 2023 Alexey Shabalin - New version 1.19.9 Fixes: CVE-2023-24539, CVE-2023-24540, CVE-2023-29400...

Security fix for the ALT Linux 10 package git version 2.33.8-alt1

2.33.8-alt1 built May 2, 2023 Dmitry V. Levin in task 319522 April 17, 2023 Dmitry V. Levin - 2.33.7 - 2.33.8 fixes: CVE-2023-25652, CVE-2023-25815, CVE-2023-29007...

Security fix for the ALT Linux 9 package ntfs-3g version 2:2021.8.22-alt2

2:2021.8.22-alt2 built April 21, 2023 Andrey Cherepanov in task 318846 Nov. 8, 2022 Alexander Danilov - Fixes CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789, CVE-2022-40284...

Security fix for the ALT Linux 9 package adcli version 0.9.2-alt1

0.9.2-alt1 built April 21, 2023 Evgeny Sinelnikov in task 314224 Oct. 17, 2022 Evgeny Sinelnikov - Add support LDAP add/mod operation to set/change password: + fix unable to join to active directory after KB5008380/CVE-2021-42287 with option '--ldap-passwd'; +...

Security fix for the ALT Linux 10 package runc version 1.1.5-alt1

1.1.5-alt1 built April 20, 2023 Alexander Danilov in task 318394 April 4, 2023 Vladimir Didenko - New version Fixes: CVE-2023-25809, CVE-2023-27561, CVE-2023-28642...