20114 matches found
elyra-code-snippet-extension (>=3.14.0, <=3.14.1), elyra-code-viewer-extension (>=3.14.0, <=3.14.1) +9 more potentially affected by CVE-2024-39700 via jupyterlab (3.5.3)
jupyterlab PYPI version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra-code-snippet-extension =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =0.0.7, =0.1.2, =0.0.1, =0.1.0, =0.0.2, =0.0.3 Source cve...
CVE-2024-40626 Stored Cross-site Scripting (XSS) vulnerability in Outline editor
Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting XSS vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other...
CVE-2024-40626 Stored Cross-site Scripting (XSS) vulnerability in Outline editor
Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting XSS vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other...
CVE-2024-40626 Stored Cross-site Scripting (XSS) vulnerability in Outline editor
Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site Scripting XSS vulnerability in Outline. An authenticated user can create a document containing a malicious JavaScript payload. When other...
WordPress Embed Peertube Playlist plugin < 1.10 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Embed Peertube Playlist versions 1.10...
WordPress RafflePress Lite plugin < 1.12.14 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Krugov Aryom in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.14...
WordPress WordPress Button Plugin MaxButtons plugin < 9.7.8 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin MaxButtons versions 9.7.8...
Tailoring Management System SQL Injection Vulnerability
Tailoring Management System is a tailoring management system from itsourcecode open source. SQL injection vulnerability exists in itsourcecode Tailoring Management System version 1.0, which originates from the parameter id/title/msg in the file templateEditor.php and can lead to SQL injection...
CVE-2024-3026
The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
CVE-2024-3963 RafflePress Lite < 1.12.14 - Editor+ Stored XSS
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
CVE-2024-3963 RafflePress Lite < 1.12.14 - Editor+ Stored XSS
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
CVE-2024-3026 WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS
The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
CVE-2024-3026
The WordPress Button Plugin MaxButtons (versions prior to 9.7.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from the plugin's failure to properly sanitise and escape certain parameters, which allows users with privileges as low as an editor to perform XSS attacks....
CVE-2024-3026 WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS
The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
How to Configure Extended Logging on a QLogic Fiber Channel Host Bus Adapter
This article describes how to configure extended logging on QLogic Fiber Channel FC Host Bus Adapter HBA. You may find that a similar procedure applies to other HBAs. Requirements Super user credentials root on Xen hosts Knowledge of vi or Nano text editor this article uses the vi editor...
CVE-2024-3963: Improper Neutralization of Input During Web Page Generation
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
CVE-2024-3026: Improper Neutralization of Input During Web Page Generation
The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks...
WordPress Slider by 10Web plugin < 1.2.56 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Slider by 10Web versions 1.2.56...
