1150 matches found
Broken Link Checker | Finder < 2.5.0 - Missing Authorization via moblc_auth_save_settings
Description The Broken Link Checker | Finder plugin for WordPress is vulnerable to modification of data due to a missing capability check on the moblcauthsavesettings function in versions up to, and including, 2.4.2. This makes it possible for unauthenticated attackers to dismiss admin notificati...
SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure
Description The plugin does not prevent unauthorised users from accessing password-protected posts' content. PoC As unauthenticated, view the source via the web browser of any password protected post and find The content of the post will be disclosed in the meta and script tags after this, exampl...
CVE-2023-47810
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...
CVE-2023-47810
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...
CVE-2023-47810 WordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asdqwe Dev Ajax Domain Checker plugin = 1.3.0 versions...
CVE-2023-47810
CVE-2023-47810 affects the WordPress Ajax Domain Checker plugin up to version 1.3.0. Root cause: improper neutralization of input during web page generation, leading to Stored Cross‑Site Scripting (XSS) as described in multiple sources. Exploitation context from connected docs indicates the vulne...
WordPress Plugin Ajax Domain Checker Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
GO-2023-2333 Range checker gadget allows wider inputs than allowed in github.com/consensys/gnark
Range checker gadget allows wider inputs than allowed in github.com/consensys/gnark...
USN-6483-1: HTML Tidy vulnerability
Neeraj Pal discovered that HTML Tidy incorrectly handled parsing certain HTML data. If a user or automated system were tricked into parsing specially crafted HTML data, a remote attacker could cause HTML Tidy to consume resources, leading to a denial of service, or possibly execute arbitrary code...
WordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Ajax Domain Checker Type Plugin Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47810 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 221e73a9646b Credits Ngô Thiên An ancorn from VNPT-VCI...
Description of the security update for Microsoft Exchange Server 2016: November 14, 2023 (KB5032147)
None None...
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 14, 2023 (KB5032146)
None None...
gnark's range checker gadget allows wider inputs up to word alignment
Impact gnark provides a gadget in the standard library to allow optimized checking of the bitwidth of the inputs. The gadget works by constructing a fixed lookup table containing all valid entries, partitioning the input and checking that all parts are inside the lookup table. The range checker...
GHSA-RJJM-X32P-M3F7 gnark's range checker gadget allows wider inputs up to word alignment
Impact gnark provides a gadget in the standard library to allow optimized checking of the bitwidth of the inputs. The gadget works by constructing a fixed lookup table containing all valid entries, partitioning the input and checking that all parts are inside the lookup table. The range checker...
PT-2023-7405 · Solarwinds · Solarwinds Orion Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform affected versions not specified Description: The issue is related to an incomplete list of disallowed inputs in the BlacklistedFilesChecker class of the SolarWinds Orion Platform, which can lead to remote code...
matrix-server-isenguard (>=0.1.1 <=0.2.0), matrix-synapse-testutils (>=1.65.0.0 <=1.95.0.0) +7 more potentially affected by CVE-2023-43796 via matrix-synapse (>=0.33.9 <=1.95.0)
matrix-synapse PYPI version =0.33.9, =0.1.1, =1.65.0.0, =0.1.2, =0.100.2, =0.1.0, =0.1.0, =0.8.0, =0.8.4 Source cves: CVE-2023-43796 Source advisory: OSV:GHSA-MP92-3JFM-3575...
WordPress Broken Link Checker | Finder Plugin <= 2.4.2 is vulnerable to Broken Access Control
Software Broken Link Checker | Finder Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.5.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46082 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID cfffdd260ad0 Credits Abdi Prana...
CVE-2023-23737
Unauth. SQL Injection SQLi vulnerability in MainWP MainWP Broken Links Checker Extension plugin = 4.0 versions...
