PT-2021-25008

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.12.9 Description: The issue is related to the btrfs file system in the Linux Kernel. It involves a fix to prevent a BUG ON condition in the link to fixup dir function. The actual impact and potential for...

PT-2021-25123

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description The issue is related to the btrfs filesystem in the Linux Kernel. A fix has been applied to prevent a potential problem in the link to fixup dir function. The actual impact and attack...

PT-2021-29002

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.12.9 Description The issue is related to the btrfs filesystem in the Linux Kernel. It involves a fix to prevent a BUG ON condition in the link to fixup dir function. The actual impact and potential for...

PT-2021-29165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue is related to the btrfs filesystem in the Linux Kernel. It involves a fix to prevent a BUG ON condition in the link to fixup dir function. The actual impact and potential for...

PT-2021-29153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.271 Description The issue is related to the btrfs filesystem in the Linux Kernel. It involves a fix to prevent a BUG ON condition in the link to fixup dir function. The actual impact and potential for attack...

Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting

Stored Cross-Site Scripting vulnerabilities in Themify Portfolio Post = 1.1.5 allow low-privileged users Contributor+ to inject arbitrary Javascript code or HTML in posts where the Themify Custom Panel is embedded. PoC 1. As a contributor, go into "Portfolios" tab from the sidebar and create a ne...

Fedora 30 : viewvc (2020-c952520959)

Fix for CVE-2020-5283. ViewVC 1.1.28 ChangeLog - security fix: escape subdir lastmod file name 211 - fix standalone.py first request failure 195 ViewVC 1.1.27 ChangeLog : - suppress stack traces with option to show 140 - distinguish text/binary/image files by icons 166, 175 - colorize alternating...

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System

Summary Open Source OpenSSH is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-15473 DESCRIPTION: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an...

Malicious Package

Overview active-linkto is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using active-linkto...

GHSA-4Q53-FQHC-CR46 ember-source Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute...

ember-source Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute...

Security Bulletin: Tivoli Storage Manager (IBM Spectrum Protect) AIX Client Buffer Overflow (CVE-2016-5985)

Summary The Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled allowing a local attacker to execute arbitrary code on the system or cause a system crash. Vulnerability Details CVEID: CVE-2016-5985 DESCRIPTION: The IBM...

Security Bulletin: Vulnerability in OpenSSL affects Tivoli Storage FlashCopy Manager Unix and VMware (CVE-2015-1788)

Summary An OpenSSL denial of service vulnerability disclosed by the OpenSSL Project affects GSKit. Tivoli Storage Manager Unix and VMware are affected as GSKit is used for communication between FCM components. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a deni...

Design/Logic Flaw

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

CVE-2018-5214: Improper Neutralization of Input During Web Page Generation

The "Add Link to Facebook" plugin through 2.3 for WordPress has XSS via the al2fbfacebookid parameter to wp-admin/profile.php...

PT-2018-16806

Name of the Vulnerable Software and Affected Versions Add Link to Facebook plugin versions prior to 2.3 Description The issue allows for XSS via the al2fb facebook id parameter to the "wp-admin/profile.php" endpoint. Recommendations For Add Link to Facebook plugin versions prior to 2.3, update to...

WordPress Add Link to Facebook Plugin HTML Injection Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site. add Link to Facebook is one of the plugin to automatically add links to Facebook. An HTML injection vulnerability exists in the WordPress Add Link to...

CVE-2015-3385

Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...

PT-2015-6205

Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Path module versions prior to 7.x-1.2 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved via the "Link to path" field formatter...

CVE-2015-3385: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...