PT-2024-24414 · Unknown · Convert Post Types

Name of the Vulnerable Software and Affected Versions: Convert Post Types versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

Denial Of Service (DoS)

OpenEXR is vulnerable to a Denial of Service DoS.The vulnerability is due to improper input validation within the convert function in exrmultipart.cpp, which results in Denial of Service if an attacker can pass a crafted input to the function...

DEBIAN-CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

UBUNTU-CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert function of exrmultipart.cpp...

PT-2024-23739

Name of the Vulnerable Software and Affected Versions Academy Software Foundation openexr versions 3.2.3 and earlier Description An issue in the convert function of exrmultipart.cpp allows a local attacker to cause a denial of service DoS. Recommendations For versions 3.2.3 and earlier, consider...

CVE-2024-31047

CVE-2024-31047 affects Academy Software Foundation OpenEXR v3.2.3 and earlier. A local attacker can trigger a denial of service via the convert function in exrmultipart.cpp. The connected materials consistently describe this DoS but do not publish explicit exploit details. Public advisories from ...

Convert Post Types <= 1.4 - Reflected Cross-Site Scripting

Description The Convert Post Types plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

CVE-2024-31112

CVE-2024-31112: Reflected XSS in Convert Post Types for WordPress. Root cause: Improper neutralization of input during web page generation. Affected: Convert Post Types plugin (versions n/a–1.4). Severity: CVSS 3.1 base 7.1 (HIGH). Attack vector: NETWORK; Attack complex: LOW; Privileges required:...

CVE-2024-31112 WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4...

CVE-2024-31112 WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stephanie Leary Convert Post Types allows Reflected XSS.This issue affects Convert Post Types: from n/a through 1.4...

WordPress Plugin Convert Post Types 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Convert Post Types A cross-site scripti...

PT-2024-23782 · Unknown · Convert Post Types

Name of the Vulnerable Software and Affected Versions: Convert Post Types versions 1.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting XSS, specifically Reflected XSS. Recommendations: For Convert...

WordPress Convert Post Types plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Convert Post Types versions = 1.4...

WordPress Convert Post Types Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Convert Post Types Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31112 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7886117d6aac Credits Dimas Maulana Required privilege...

GHSA-5359-PVF2-PW78 TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements

Impact A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an object or embed element and that image could potentially contain a XSS payload. Fix TinyMCE 6.8.1 introduced a new convertunsafeembeds opti...

Cross-site Scripting (XSS)

Overview TinyMCE is a web-based JavaScript HTML WYSIWYG editor control. Affected versions of this package are vulnerable to Cross-site Scripting XSS when loading SVG files via object or embed elements. Workaround This vulnerability can be avoided by simulating the functionality of the...

PT-2024-23105

Name of the Vulnerable Software and Affected Versions TinyMCE versions prior to 6.8.1 TinyMCE versions prior to 7.0.0 Description A cross-site scripting XSS vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an object or embed...

CVE-2021-47114

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption by fallocate When fallocate punches holes out of inode size, if original isize is in the middle of last cluster, then the part from isize to the end of the cluster will be zeroed with buffer write, at...

vl-convert-rs (0.8.0) potentially affected by CVE-2024-27936 via deno_runtime (0.105.0)

denoruntime CARGO version 0.105.0 is affected by a known vulnerability. The following packages have a transitive dependency on denoruntime and may be impacted: - vl-convert-rs 0.8.0 Source cves: CVE-2024-27936 Source advisory: OSV:GHSA-M4PQ-FV2W-6HRW...