28 matches found
PT-2024-17242
Name of the Vulnerable Software and Affected Versions WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more plugin for WordPress versions up to, and including, 1.3.1 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'gs book showcas...
CVE-2024-11766: Improper Neutralization of Input During Web Page Generation
The WordPress Book Plugin for Displaying Books in Grid, Flip, Slider, Popup Layout and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gsbookshowcase' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output...
[SECURITY] Fedora 40 Update: qt5-qtsvg-5.15.14-1.fc40
Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices...
[SECURITY] Fedora 39 Update: rust-uu_echo-0.0.23-3.fc39
echo uutils display TEXT...
PT-2024-22281 · Easyrange · Easyrange
Name of the Vulnerable Software and Affected Versions: EasyRange Ver 1.41 Description: The issue with the executable file search path when displaying an extracted file on Explorer may lead to loading an executable file that resides in the same folder where the extracted file is placed. If this...
CVE-2023-38062
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations...
Zhuhai Suny Technology ESL Tag Forgery / Replay Attacks
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Replay attacks & Displaying arbitrary contents product: Zhuhai Suny Technology ESL Tag / ETAG-TECH protocol electronic shelf labels vulnerable version: All fixed version:...
Cross site scripting
Jenkins Image Tag Parameter Plugin 1.10 and earlier does not escape the name and description of Image Tag parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-34187: Improper Neutralization of Input During Web Page Generation
Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-30964: Improper Neutralization of Input During Web Page Generation
Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-29036
Jenkins Credentials Plugin 1111.v35a307992395 and earlier, except 1087.1089.v2f1b9ab040e4, 1074.1076.v39c30cecb0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability...
CVE-2022-29044: Improper Neutralization of Input During Web Page Generation
Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
Cross site scripting
Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...
CVE-2017-1241
An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523...
The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption in the kernel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a result of...
[SECURITY] Fedora 23 Update: drupal7-views-3.14-1.fc23
You need Views if: You like the default front page view, but you find you want to sort it differently. You like the default taxonomy/term view, but you find you want to sort it differently; for example, alphabetically. You use /tracker, but you want to restrict it to posts of a certain type. You...
KLA10466 Multiple vulnerabilities in Apple Safari
Multiple vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to . Below is a complete list of vulnerabilities 1. Inconsistent URL diaplsying can be exploited remotely via a specially designed URL; 2. Unknown vulnerabilities can be exploited remotely...
Fedora Update for merkaartor FEDORA-2011-5200
Check for the Version of merkaartor OpenVAS Vulnerability Test Fedora Update for merkaartor FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
CVE-2010-3693
Cross-site scripting XSS vulnerability in Horde Dynamic IMP DIMP before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names...
