PT-2022-15602 · Apple · Watchos +2

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.5 Safari versions prior to 15.4 Description: A user interface issue was addressed, which could allow address bar spoofing when visiting a malicious website. Recommendations: For watchOS versions prior to 8.5, updat...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple Inc. in the United States. Apple watchOS 8.5 previously contained a security vulnerability that originated in Apple's browser that could lead to address bar spoofing when visiting a malicious website...

WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin versions = 17.5.2. Solution Update the WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin to the latest available version at least 17.5.3...

WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin <= 2.1.14 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin versions = 2.1.14. Solution Update the WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin –...

WordPress Top Bar – PopUps – by WPOptin plugin <= 1.2.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Top Bar – PopUps – by WPOptin plugin versions = 1.2.3. Solution Update the WordPress Top Bar – PopUps – by WPOptin plugin to the latest available version at least 1.2.4...

WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin <= 17.5.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin versions = 17.5.2. Solution Update the WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar plugin to the latest available version at least...

WordPress Scheduled Notification Bar plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Scheduled Notification Bar plugin versions = 1.0.1. Solution No patched version available...

WordPress Scheduled Notification Bar plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Scheduled Notification Bar plugin versions = 1.0.1. Solution No patched version available...

WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin <= 2.1.14 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin versions = 2.1.14. Solution Update the WordPress Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar plugin to the latest...

WordPress Wp My Admin Bar plugin <= 3.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Wp My Admin Bar plugin versions = 3.1.0. Solution No patched version available...

WordPress Wp My Admin Bar plugin <= 3.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Wp My Admin Bar plugin versions = 3.1.0. Solution No patched version available...

Hide Admin Bar Based on User Roles < 3.1.0 - Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, allowing attackers to make a logged in admin update the plugin's settings via a CSRF attack https://example.com/wp-admin/admin-ajax.php?action=saveuserroles&caps=test&disableForAll=no...

WordPress Hide Admin Bar Based on User Roles plugin <= 3.0.0 - Settings Update via Cross-Site Request Forgery (CSRF) vulnerability

Settings Update via Cross-Site Request Forgery CSRF vulnerability discovered by Jan w Oleju in WordPress Hide Admin Bar Based on User Roles plugin versions = 3.0.0. Solution Update the WordPress Hide Admin Bar Based on User Roles plugin to the latest available version at least 3.1.0...

Hide Admin Bar Based on User Roles < 3.0.0 - Subscriber+ Settings Update

The plugin does not have authorisation and CSRF checks, allowing any authenticated users, such as subscriber, to update the plugin's settings https://example.com/wp-admin/admin-ajax.php?action=saveuserroles&caps=test&disableForAll=no...

WordPress Hide Admin Bar Based on User Roles plugin <= 2.9.0 - Subscriber+ Settings Update vulnerability

Subscriber+ Settings Update vulnerability discovered by Jan w Oleju in WordPress Hide Admin Bar Based on User Roles plugin versions = 2.9.0. Solution Update the WordPress Hide Admin Bar Based on User Roles plugin to the latest available version at least 3.0.0...

GLSA-202202-02 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202202-02 Chromium, Google Chrome: Multiple vulnerabilities - Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

orderonline.bigbenpizzabar.com.au Cross Site Scripting vulnerability OBB-2374651

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0110

Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-0118

The CVE-2022-0118 issue affects Google Chrome/Chromium’s WebShare implementation. A bug allowed a remote attacker to potentially hide the Omnibox contents via a crafted HTML page. Public materials trace the vulnerability to WebShare behavior and indicate fixes were shipped in Chrome/Chromium arou...

CVE-2022-0116

CVE-2022-0116 affects Google Chrome/Chromium. Root cause: inappropriate implementation in Compositing. Impact: remote attacker can spoof the Omnibox (URL bar) via a crafted HTML page. Affected: Chrome/Chromium builds prior to 97.0.4692.71. Mitigation: upgrade to 97.0.4692.71 or newer (per linked ...