CVE-2023-39166

CVE-2023-39166: In WordPress plugin tagDiv Composer, a Cross-Site Request Forgery (CSRF) leads to Cross-Site Scripting (XSS). Affected: versions prior to 4.4. Remediation: update to version 4.4 or later (patched).

CVE-2023-39166 WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tagDiv tagDiv Composer allows Cross-Site Scripting XSS.This issue affects tagDiv Composer: from n/a before 4.4...

PT-2023-26820 · Tagdiv · Tagdiv Composer

Name of the Vulnerable Software and Affected Versions: tagDiv Composer versions prior to 4.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in tagDiv Composer. Recommendations: For versions prior to 4.4, update to version...

WordPress Plugin tagDiv Composer Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2023-47129

Statamic CMS (core Laravel package) vulnerability CVE-2023-47129: front-end forms with asset upload fields can accept PHP files crafted to look like images, enabling potential code execution. Affects forms using the Form feature (not the control panel). Patched in versions 3.4.13 and 4.33.0; upgr...

Fedora 39 : composer (2023-d5ab1f0b44)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d5ab1f0b44 advisory. Version 2.6.5 - 2023-10-06 Fixed error when vendor dir contains broken symlinks 11670 Fixed composer.lock missing from Composer's zip archives 11674...

Fedora: Security Advisory (FEDORA-2023-d5ab1f0b44)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: composer-2.6.5-1.fc39

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

CVE-2023-21308

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21308

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21308

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21308

In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21308

CVE-2023-21308 : In Composer, a missing bounds check allows an out-of-bounds read which could enable local escalation of privilege without user interaction. Exploitation details/affected versions are not disclosed in the provided documents. No patch/remediation information is included here. If ex...

PT-2023-18087 · Composer · Composer

Name of the Vulnerable Software and Affected Versions: Composer affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in Composer. This could lead to local escalation of privilege with no additional execution privileges...

Medium: composer

Issue Overview: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code execution vulnerability if PHP also has registerargcargv enabled in php.ini. Versions...

Amazon Linux 2023 : composer (ALAS2023-2023-384)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-384 advisory. Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php file may be subject to a remote code executi...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Composer vulnerability (USN-5220-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5220-1 advisory. It was discovered that Composer did not properly sanitize URLs for Mercurial repositories in the root composer.json and package source...

Fedora: Security Advisory for composer (FEDORA-2023-f3dedfef46)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for composer (FEDORA-2023-275c12e496)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...