2420 matches found
PT-2024-20395 · WordPress · Inline Related Posts
Name of the Vulnerable Software and Affected Versions: Inline Related Posts WordPress plugin versions prior to 3.5.0 Description: The issue concerns the Inline Related Posts WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users,...
Unspecified vulnerability in Gnu emacs (CNVD-2025-15363)
Gnu emacs is a family of text editors in the American GNU community. Gnu emacs suffers from a security vulnerability that stems from Gnus treating inline MIME content as trusted. No details of the vulnerability are provided at this time...
AZL-37104 CVE-2024-30203 affecting package emacs for versions less than 29.3-1
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
DEBIAN-CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
AZL-37081 CVE-2024-30203 affecting package emacs for versions less than 29.3-1
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
UBUNTU-CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
PT-2024-23252 · Emacs +9 · Emacs +9
Name of the Vulnerable Software and Affected Versions: Emacs versions prior to 29.3 Description: The issue concerns how Gnus in Emacs handles inline MIME contents, treating them as trusted. This could potentially lead to security issues, although specific details about exploitation or affected...
GNU Emacs 安全漏洞
GNU Emacs is a family of text editors in the American GNU community. A security vulnerability existed prior to GNU Emacs version 29.3, which stemmed from Gnus treating inline MIME content as trusted...
[SECURITY] Fedora 40 Update: w3m-0.5.3-63.git20230121.fc40
The w3m program is a pager or text file viewer that can also be used as a text-mode Web browser. W3m features include the following: when reading an HTML document, you can follow links and view images using an external image viewer; its internet message mode determines the type of document from t...
OESA-2024-1301 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline exten...
OESA-2024-1298 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline exten...
OESA-2024-1300 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline exten...
OESA-2024-1299 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups There are a few exceptional cases where cloning an inline extent needs to copy the inline exten...
Inline Related Posts < 3.6.0 - Subscriber+ Password Protected Post Read
Description The plugin does not ensure that post content displayed via an AJAX action are accessible to the user, allowing any authenticated user, such as subscriber to retrieve the content of password protected posts When logged in as a subscriber, open the following URL and note that the conten...
nriv-inline-skaterhockey.de Cross Site Scripting vulnerability OBB-3881326
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Inline Related Posts < 3.5.0 - Admin+ Stored XSS
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed Put the following payload in the CSS margin-top settings: 0 em" onmouseover=alert/XSS/// Th...
Cross-site Scripting (XSS)
Overview phlex is a high-performance view framework optimised for fun. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to case-insensitivity in the code designed to prevent XSS attacks. When rendering HTML or SVG tags with user-provided attributes, malicious event...
Cross site scripting
phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting XSS vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was meant to prevent these attacks. If you...