116 matches found
kk-nbc.jp Cross Site Scripting vulnerability OBB-2813607
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
new packages: hunspell-kk
An update is available for hunspell-kk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
WordPress kk Star Ratings plugin < 5.2.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...
WordPress kk Star Ratings plugin < 5.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
Cross site scripting
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
CVE-2020-35438
Cross Site Scripting XSS vulnerability in the kk Star Ratings plugin before 4.1.5...
CVE-2020-35438
CVE-2020-35438 is a Cross Site Scripting (XSS) vulnerability in the kk Star Ratings plugin prior to version 4.1.5. The issue affects the plugin’s handling of user-provided input in its rating functionality, enabling an attacker to inject malicious scripts. Public sources in connected documents co...
Kk Star Ratings 跨站脚本漏洞
kk-star-ratings is an application. Used to allow blog visitors to engage and interact with your site by rating posts. A cross-site scripting vulnerability exists in the Kk Star Ratings plugin prior to version 4.1.5...
PT-2021-11765 · Unknown · Kk Star Ratings
Name of the Vulnerable Software and Affected Versions: kk Star Ratings plugin versions prior to 4.1.5 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to...
KK Video Recorder for PC suffers from DLL hijacking vulnerability
KK Video Recorder is a free HD video recording software that combines multiple functions such as game recording and video recording. KK Video Recorder for PC suffers from a DLL hijacking vulnerability that can be exploited by attackers to gain control of the server...
Soliton Systems Kk FileZen Path Traversal Vulnerability
Soliton Systems Kk FileZen is a file hosting device from Soliton Systems Kk, Japan. The device features file storage, file transfer, file upload and download. A security vulnerability exists in Soliton Systems FileZen that originates from an input validation error when processing a directory...
kk-technology.sk Cross Site Scripting vulnerability OBB-1479905
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
kk-technology.sk Cross Site Scripting vulnerability OBB-1469016
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2015-9547
An issue was discovered on Samsung mobile devices with JBP4.3 and KK4.4.2 software. Because the READLOGS permission is mishandled, sensitive information is disclosed in a world-readable copy of the log file if the error message is "Unhandled exception in Dalvik VM," "Application not responding AN...
CVE-2015-5524
An issue was discovered on Samsung mobile devices with KK4.4 and later software through 2015-05-13. There is a buffer overflow in datablockwrite because the amount of received data is not validated. The Samsung ID is SVE-2015-4018 December 2015...
CVE-2015-9547
CVE-2015-9547 describes an information-disclosure issue on Samsung mobile devices running JBP(4.3) and KK(4.4.2). The vulnerability stems from mishandling the READ_LOGS permission, causing sensitive data to be exposed in a world-readable log copy if the error messages include, for example, “Unhan...
CVE-2015-5524
CVE-2015-5524 affects Samsung mobile devices running KK (Android 4.4) and later up to 2015-05-13, due to a buffer overflow in datablock_write caused by unvalidated received data. The Samsung internal ID is SVE-2015-4018. The CVSS indicates high severity (CRITICAL in CVSS‑3.1; High in CVSS‑2). Ava...
Code injection
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.x software. An attacker can crash system processes via a Serializable object because of missing exception handling. The Samsung IDs are SVE-2017-8109, SVE-2017-8110, SVE-2017-8115, SVE-2017-8118, and SVE-2017-811...