1140 matches found
CVE-2022-40311
Auth. admin+ Stored Cross-Site Scripting XSS in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress...
CVE-2022-40311 WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Auth. admin+ Stored Cross-Site Scripting XSS in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress...
CVE-2022-40311
The CVE-2022-40311 entry concerns the WordPress plugin Analytics Cat by Fatcat Apps, affected in versions
CVE-2022-40311 WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Auth. admin+ Stored Cross-Site Scripting XSS in Fatcat Apps Analytics Cat plugin = 1.0.9 on WordPress...
WordPress Plugin Fatcat Apps Analytics Cat 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Vlad Vector Patchstack in WordPress Analytics Cat plugin versions = 1.0.9. Solution Update the WordPress Analytics Cat plugin to the latest available version at least 1.1.0...
Analytics Cat < 1.1.0 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
berthoud.catalog.aspencat.info Cross Site Scripting vulnerability OBB-2825079
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-27868
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...
CVE-2022-27868
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...
Design/Logic Flaw
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...
CVE-2022-27868
Autodesk AutoCAD 2023 is affected by CVE-2022-27868 via a use-after-free in the CATPart/CAT parsing path when processing a malicious CAT file. The underlying issue is a parsing/use-after-free flaw that can lead to code execution in the context of the current process. Multiple sources (including Z...
CVE-2022-27868
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...
MAL-2022-1843 Malicious code in cat-weather-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cat-webcomponent-image (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e416fba4ad4098c98b9a1b6b381472b248c0fc0dd977333c87e9f707251deb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cat-weather-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88ace5963f5686d2f51198d181864c25de04bd9fa46139da3ecf262068144c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
new packages: intel-cmt-cat
An update is available for intel-cmt-cat. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...
