CVE-2022-36343

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin = 1.0.1 at WordPress...

WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.3 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Kim Jong Min aka Universe Patchstack Alliance in WordPress Enable SVG, WebP & ICO Upload plugin versions = 1.0.3. Solution No patched version available...

CVE-2022-36343: Improper Neutralization of Input During Web Page Generation

Authenticated author or higher user role Stored Cross-Site Scripting XSS vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin = 1.0.1 at WordPress...

CVE-2022-34154: Unrestricted Upload of File with Dangerous Type

Authenticated author or higher user role Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin = 1.0.1 at WordPress...

PT-2022-32661

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue concerns a data-race around sysctl icmp echo enable probe in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior...

PT-2022-32442

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to data-races around sysctl icmp echo enable probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

TerraformGoat - "Vulnerable By Design" Multi Cloud Deployment Tool

TerraformGoat is selefra research lab's "Vulnerable by Design" multi cloud deployment tool. Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei Cloud, Amazon Web Services, Google Cloud Platform, Microsoft Azure. Scenarios ID | Cloud Service Company | Types Of Cloud...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to an assertion failure. Exploiting this vulnerability is only possible if the SQLite instance was compiled with -DSQLITEENABLESTAT4. PoC sql CREATE TABLE t0 c0 INT, c1 INT PRIMARY KEY WITHOUT ROWID; INSERT INT...

Microsoft Windows BitLocker 安全特征问题漏洞

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. Microsoft Windows BitLocker has a security feature issue. The following products and versions are affected:Windows 10 for 32-bit Systems,Windows 10 for...

PT-2022-31031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.18.2 Description The issue is related to an imbalance in enable count with EXCLUSIVE GET. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.0...

DEBIAN-CVE-2022-31085

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by...

PT-2022-5116 · Unknown · Dotcms Core

Name of the Vulnerable Software and Affected Versions: dotCMS Core versions through 22.06 Description: The issue is related to a Reflected Cross-site scripting XSS problem in the admin portal of dotCMS Core. This occurs when the configuration has XSS PROTECTION ENABLED set to false. The...

CVE-2022-1562

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

CVE-2022-1562

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

PT-2022-13962

Name of the Vulnerable Software and Affected Versions Enable SVG WordPress plugin versions prior to 1.4.0 Description The issue concerns the Enable SVG WordPress plugin, which does not properly sanitize uploaded SVG files. This could allow users with a role as low as Author to upload malicious SV...

CVE-2022-1562: Improper Neutralization of Input During Web Page Generation

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...

WordPress plugin Enable SVG 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Enable SVG plugin version 1.4.0 or earlier has a cross-site scripting vulnerability that...

Moderator can enable cam/mic remotely if cam/mic-permission was disabled while user has activated cam/mic

None...

PT-2025-26017

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the csdlock debug kernel-boot parameter, which is parsed by the early param function csdlock debug. If set,...

WordPress Enable SVG plugin <= 1.3.1 - Stored Cross-Site Scripting (XSS) vulnerability via SVG

Stored Cross-Site Scripting XSS vulnerability via SVG discovered by Luan Pedersini in WordPress Enable SVG plugin versions = 1.3.1. Solution Update the WordPress Enable SVG plugin to the latest available version at least 1.4.0...