13 matches found
EUVD-2023-32330
Malicious code in bioql PyPI...
glaze:csv_parsing: Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u,
Project: https://github.com/stephenberry/glaze.git Detailed Report: https://oss-fuzz.com/testcase?key=6292489860612096 Project: glaze Fuzzing Engine: libFuzzer Fuzz Target: csvparsing Job Type: libfuzzerasanglaze Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
glaze:csv_parsing: Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1
Project: https://github.com/stephenberry/glaze.git Detailed Report: https://oss-fuzz.com/testcase?key=6060579477585920 Project: glaze Fuzzing Engine: libFuzzer Fuzz Target: csvparsing Job Type: libfuzzerasanglaze Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
glaze:json_generic: Heap-buffer-overflow in void glz::from<10u, std::__1::variant<std::nullptr_t, double, std::__1::basic_st
Project: https://github.com/stephenberry/glaze.git Detailed Report: https://oss-fuzz.com/testcase?key=6395086764310528 Project: glaze Fuzzing Engine: libFuzzer Fuzz Target: jsongeneric Job Type: libfuzzerasanglaze Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...
glaze:json_generic: Container-overflow in void glz::from<10u, std::__1::variant<std::nullptr_t, double, std::__1::basic_st
Project: https://github.com/stephenberry/glaze.git Detailed Report: https://oss-fuzz.com/testcase?key=4603432566849536 Project: glaze Fuzzing Engine: libFuzzer Fuzz Target: jsongeneric Job Type: libfuzzerasanglaze Platform Id: linux Crash Type: Container-overflow READ 5 Crash Address:...
CVE-2023-28687
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687
CVE-2023-28687 is a Reflected XSS vulnerability affecting multiple WordPress themes: Glaze Blog Lite (<= 1.1.4), Fascinate (<= 1.0.8), Cream Blog (<= 2.1.3), and Cream Magazine (= 1.1.5, Fascinate >= 1.0.9, Cream Blog >= 2.1.4, and Cream Magazine >= 2.1.5. Patch priority ranges ...
CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
CVE-2023-28687: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected XSS.This issue affects Glaze Blog Lite: from n/a through = 1.1.4; Fascinate: fr...
PT-2024-12173
Name of the Vulnerable Software and Affected Versions Glaze Blog Lite versions 1.1.4 and earlier Fascinate version 1.0.8 Cream Blog version 2.1.3 Cream Magazine version 2.1.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site...
WordPress Glaze Blog Lite Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Software Glaze Blog Lite Type Theme Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28687 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 0a07af531c50 Credits László Radnai Required...