CVE-2024-34565

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debug Info allows Stored XSS.This issue affects Debug Info: from n/a through 1.3.10...

CVE-2024-34565 WordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debug Info allows Stored XSS.This issue affects Debug Info: from n/a through 1.3.10...

CVE-2024-34565

CVE-2024-34565 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress Debug Info plugin. The issue is caused by improper input neutralization during web page generation and affects Debug Info versions up to 1.3.10 (n/a through 1.3.10). Exploitation details, affected environments, a...

CVE-2024-34565 WordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Debug Info allows Stored XSS.This issue affects Debug Info: from n/a through 1.3.10...

WordPress plugin Debug Info 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Debug Info A cross-site scripting...

PT-2024-25980 · Unknown · Debug Info

Name of the Vulnerable Software and Affected Versions: Debug Info versions through 1.3.10 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject malicio...

CVE-2024-29206

An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Version 1.1.18 and earlier UniFi Connect EV Station Pro Version 1.1.18 and earlier UniFi...

CVE-2024-29206

An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Version 1.1.18 and earlier UniFi Connect EV Station Pro Version 1.1.18 and earlier UniFi...

CVE-2024-29206

CVE-2024-29206 concerns multiple Ubiquiti UniFi devices. The issue is described as an improper access control that, if an attacker is authenticated in the API, can enable Android Debug Bridge (ADB) and make unsupported changes to the system. Affected products and versions include: UniFi Connect E...

WordPress Debug Info plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jakick Patchstack Alliance in WordPress Plugin Debug Info versions = 1.3.10...

Sensitive Information Disclosure

topthink/framework is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of error messages, which can reveal the PHPSESSION cookie through debug error output source code when a crafted URI is used in a GET request...

CVE-2024-29150

The CVE affects Alcatel-Lucent ALE NOE deskphones (86x8 NOE-R300.1.40.12.4180 and earlier) and SIP deskphones (86x8_SIP-R200.1.01.10.728 and earlier). The root cause is improper privilege management that allows an authenticated attacker to create symbolic links to sensitive files in debugging dat...

CVE-2024-29150

An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8NOE-R300.1.40.12.4180 and SIP deskphones through 86x8SIP-R200.1.01.10.728. Because of improper privilege management, an authenticated attacker is able to create symlinks to sensitive and protected data in locations that are...

WordPress Debug Info Plugin <= 1.3.10 is vulnerable to Cross Site Scripting (XSS)

Software Debug Info Type Plugin Vulnerable versions = 1.3.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34565 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 266a802a12bf Credits Jakick Required privilege Administrator...

PT-2024-22767 · Alcatel Lucent · Alcatel-Lucent Ale Noe Deskphones +1

Name of the Vulnerable Software and Affected Versions: Alcatel-Lucent ALE NOE deskphones versions 86x8 NOE-R300.1.40.12.4180 and earlier Alcatel-Lucent ALE SIP deskphones versions 86x8 SIP-R200.1.01.10.728 and earlier Description: An issue was discovered due to improper privilege management,...

ThinkPHP Cross-Site Scripting Vulnerability

ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in thinkexception.tpl...

CVE-2024-34467

ThinkPHP 8.0.3 is affected by a cross‑site scripting (XSS) flaw caused by inadequate filtering of function argument values in think_exception.tpl. Remote attackers may exploit this to inject scripts; several sources also describe potential disclosure of the PHPSESSION cookie via error output. Red...

CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

UBUNTU-CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...

CVE-2022-48699

In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in updatescheddomaindebugfs Kuyo reports that the pattern of using debugfsremovedebugfslookup leaks a dentry and with a hotplug stress test, the machine eventually runs out of memory. Fix this up by...