4174 matches found
Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information
A now-patched security flaw in the Opera web browser could have enabled a malicious extension to gain unauthorized, full access to private APIs. The attack, codenamed CrossBarking , could have made it possible to conduct actions such as capturing screenshots, modifying browser settings, and accou...
CVE-2024-7783 Improper Storage of Sensitive Information in Bearer Token in mintplex-labs/anything-llm
mintplex-labs/anything-llm version latest contains a vulnerability where sensitive information, specifically a password, is improperly stored within a JWT JSON Web Token used as a bearer token in single user mode. When decoded, the JWT reveals the password in plaintext. This improper storage of...
CVE-2024-50407
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kiboko Labs Namaste! LMS allows Reflected XSS.This issue affects Namaste! LMS: from n/a through 2.6.2...
CVE-2024-50409
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through = 2.6.2...
CVE-2024-50410
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through = 2.6.4...
CVE-2024-50407
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through = 2.6.2...
CVE-2024-50407
Namaste! LMS (Namaste! LMS by Kiboko Labs) contains a Reflected XSS in versions up to 2.6.2 caused by improper input neutralization during web page generation. CVE-2024-50407 documents an XSS vulnerability with CVSS v3.1 base score 7.1 (HIGH) [attack vector: network; user interaction: required]. ...
CVE-2024-50409 WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through = 2.6.2...
CVE-2024-50409
CVE-2024-50409 – Namaste! LMS (WordPress) Stored XSS . Affected versions: Namaste! LMS up to 2.6.2. The issue stems from improper neutralization of input during web page generation, enabling stored XSS. The vulnerability is documented in Patchstack and CVE records, and Patchstack notes that the f...
CVE-2024-50410 WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.This issue affects Namaste! LMS: from n/a through = 2.6.4...
CVE-2024-50410
Namaste! LMS (WordPress plugin) contains a stored XSS vulnerability (CVE-2024-50410) due to improper input neutralization during web page generation. Affected versions are up to 2.6.4; patch 2.6.4.1 fixes the issue. Patchstack and CVE records confirm the fix and vulnerability details. If upgradin...
CVE-2024-50408
Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3...
CVE-2024-50408
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through = 2.6.3...
CVE-2024-50408
CVE-2024-50408 concerns Namaste! LMS for WordPress. The Namaste! LMS plugin, versions n/a through 2.6.3, is affected by a PHP Object Injection vulnerability due to unsafe deserialization of untrusted data, enabling object injection. This entry is corroborated by Patchstack, Red Hat, CVE records, ...
AWS VDP: A potential risk in the cloudFrontExtensionsConsole which can be used to privilege escalation.
A potential risk was found in the cloudFrontExtensionsConsole when it was deployed in the awslabs repository on GitHub. The functions created by the application had excessive permissions that could be leveraged to escalate privileges...
CVE-2024-49311
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WisdmLabs Edwiser Bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through 3.0.7...
Amazon Linux 2 : unbound (ALAS-2024-2650)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2650 advisory. NLnet Labs Unbound up to and including version 1.21.0 contains a vulnerability when handling replies with very large RRsets that i...
