212 matches found
“Substantial proportion” of Americans may have had health and personal data stolen in Change Healthcare breach
UnitedHealth Group has given an update on the February cyberattack on Change Healthcare, one of its subsidiaries. In the update, the company revealed the scale of the breach, saying: “Based on initial targeted data sampling to date, the company has found files containing protected health...
GHSA-2MM7-X5H6-5PVQ Moby (Docker Engine) started with non-empty inheritable Linux process capabilities
Impact A bug was found in Moby Docker Engine where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during...
CVE-2024-31376
Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...
CVE-2024-31376 WordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...
CVE-2024-31376
CVE-2024-31376 is a CSRF flaw in the WordPress plugin Dashboard To-Do List by Andrew Rapps, affecting the plugin up to version 1.3.1. The RedHat/Wordfence entries indicate the vulnerability path involves ardtdw_widgetupdate() and allows Cross-Site Request Forgery to perform actions on behalf of a...
WordPress Dashboard To-Do List Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Dashboard To-Do List Type Plugin Vulnerable versions = 1.3.1 Fixed in 1.3.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31376 Patch priority Low CVSS severity Low 4.3 Developer Andrew Rapps PSID b3a254552841 Credits Dhabaleshwar Das...
CVE-2023-30752
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...
CVE-2023-30752
The CVE-2023-30752 entry concerns the WordPress External Videos plugin and is documented as an authentication‑required Stored XSS in versions <= 2.0.1. Affected component: External Videos plugin; root cause: insufficient input filtering/escaping that allows stored script execution when an admi...
CVE-2023-30752 WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...
CVE-2023-30752 WordPress External Videos Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin = 2.0.1 versions...
Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members Gabriele Svelto, Andrew McCreight, the Mozilla Fuzzing Team, Sean Feng, and Sebastian Hengst reported memory safety bugs present in Firefox 113 and Firefox ESR 102.11. Some of these bugs show...
andrewsimpsoncentres.org Cross Site Scripting vulnerability OBB-3328888
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2023-864 Malicious code in the-ashes-of-london-marwood-and-lovett-1-by-andrew-taylor-on-ipad-full-volumes- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097c2145981a125fa3f3ad898d922ad32b2760f65e716e2adea2192c7738eae7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-23701
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Andrew @ Geeenville Web Design Easy Sign Up plugin = 3.4.1 versions...
CVE-2023-23701 WordPress Easy Sign Up Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Andrew @ Geeenville Web Design Easy Sign Up plugin = 3.4.1 versions...
andrew-lowe.ca Cross Site Scripting vulnerability OBB-3296465
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
andrewkreps.com Open Redirect vulnerability OBB-3139112
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-46883
CVE-2022-46883 : Mozilla Firefox contains memory-safety bugs in Firefox 106 that could allow arbitrary code execution. The fixes were included in Firefox 107, and the vulnerability affects Firefox versions earlier than 107 (no exploit details provided in the documents). Affected : Firefox
CVE-2022-46883
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run...
andrew-dixon.co.uk Cross Site Scripting vulnerability OBB-3106537
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...