756 matches found
compareandchoose.com.au Cross Site Scripting vulnerability OBB-3769178
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CLSA-2023-1697465384 python2: Fix of CVE-2022-48566
CVE-2022-48566: Make comparedigest more constant-time...
CLSA-2023-1697463705 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...
CLSA-2023-1697463155 Fix CVE(s): CVE-2022-48566
SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make comparedigest more constant-time - CVE-2022-48566...
TM WooCommerce Compare & Wishlist <= 1.1.7 - Contributor+ Stored Cross-Site Scripting
Description The plugin does not sufficiently sanitize and escape user-supplied attributes in the 'tmwoowishlisttable' shortcode. This leads to a Stored Cross-Site Scripting vulnerability, enabling authenticated users with contributor-level or higher permissions to inject arbitrary web scripts...
WordPress plugin TM WooCommerce Compare & Wishlist Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress TM WooCommerce Compare & Wishlist Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Software TM WooCommerce Compare & Wishlist Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5230 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 76b4f5683bff Credits Lana Cod...
PT-2023-31959 · WordPress · Tm Woocommerce Compare & Wishlist
Name of the Vulnerable Software and Affected Versions: TM WooCommerce Compare & Wishlist plugin for WordPress versions up to, and including, 1.1.7 Description: The issue is related to Stored Cross-Site Scripting via the 'tm woo wishlist table' shortcode due to insufficient input sanitization and...
Python < 3.6.13, 3.7.x < 3.7.10, 3.8.x < 3.8.7, 3.9.x < 3.9.1 Race Condition Vulnerability (bpo-40791) - Windows
Python is prone to a race condition vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...
The vulnerability of the `compare_symbols()` function in the GNU Binutils development toolset, which allows an attacker to cause a service failure or exert other effects.
The vulnerability of the comparesymbols function in the GNU Binutils development toolset is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...
OESA-2023-1640 python3 security update
Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...
CLSA-2023-1694538536 Fix CVE(s): CVE-2022-47695
SECURITY UPDATE: segmentation fault in objdump.c comparesymbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695...
CLSA-2023-1694538006 Fix CVE(s): CVE-2022-47695
SECURITY UPDATE: segmentation fault in objdump.c comparesymbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695...
Gnu Binutils objdump Denial of Service Vulnerability
Gnu Binutils objdump is a command-line tool in the GNU Binutils toolset that is mainly used to analyze binary files e.g., executables, target files, static libraries, etc. and display their detailed information. A denial of service vulnerability exists in Gnu Binutils objdump, which stems from th...
PT-2023-35979 · Oracle · Java.Base
Name of the Vulnerable Software and Affected Versions: org.antlr.v4.runtime affected versions not specified Description: A security exception crash has been reported. The crash involves the fromRuleContext function in org.antlr.v4.runtime.atn.PredictionContext, along with weakCompareAndSetInt and...
CVE-2023-40800
The compareparentcontroltime function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulnerability in Tenda AC23 v16.03.07.45cn...
PT-2023-27644 · Tenda · Tenda Ac23
Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: The compare parentcontrol time function does not authenticate user input parameters, resulting in a post-authentication stack overflow issue. This allows for potential exploitation after a user h...
CVE-2022-48566
An issue was discovered in comparedigest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.comparedigest...