12257 matches found
Asus Rog Live Service 后置链接漏洞
ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...
CVE-2021-24971
The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wprliveupdate AJAX action, as well as do not sanitise and escape some of the data submitted. As a result, any authenticated, such as subscriber could update the plugin's settings and perform...
WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin < 1.0.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin versions 1.0.8. Solution Update the WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for...
WordPress Live TV Player – Worldwide Live TV Channels Player for WordPress plugin <= 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Live TV Player – Worldwide Live TV Channels Player for WordPress plugin versions = 1.0.5. Solution No patched version available...
WordPress Live TV Player – Worldwide Live TV Channels Player for WordPress plugin <= 1.0.5 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Live TV Player – Worldwide Live TV Channels Player for WordPress plugin versions = 1.0.5. Solution No patched version available...
WordPress Live Scores for SportsPress plugin <= 1.9.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Live Scores for SportsPress plugin versions = 1.9.1. Solution Update the WordPress Live Scores for SportsPress plugin to the latest available version at least 1.9.2...
WordPress Ajax Live Search Plugin For WordPress plugin <= 2.3.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ajax Live Search Plugin For WordPress plugin versions = 2.3.7. Solution No patched version available...
WordPress 跨站脚本漏洞
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of WordPress WP Responsive Menu plugin prior to 3.1.7.1,...
WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin < 1.0.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin versions 1.0.8. Solution Update the WordPress "Radio Player – Live Shoutcast, Icecast and Audio Stream Player for WordPress" plugin to the...
WordPress Live Scores for SportsPress plugin <= 1.9.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Live Scores for SportsPress plugin versions = 1.9.1. Solution Update the WordPress Live Scores for SportsPress plugin to the latest available version at least 1.9.2...
WordPress Ajax Live Search Plugin For WordPress plugin <= 2.3.7 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Ajax Live Search Plugin For WordPress plugin versions = 2.3.7. Solution No patched version available...
PT-2022-9538
Name of the Vulnerable Software and Affected Versions WP Responsive Menu versions prior to 3.1.7.1 Description The issue concerns a lack of capability and CSRF checks in the wpr live update AJAX action, as well as insufficient sanitization and escaping of submitted data. This allows any...
Zenly Social-Media App Bugs Allow Account Takeover
Zenly, a social app from Snap that allows users to see the locations of friends and family on a live map, contains a pair of vulnerabilities that could endanger those being tracked. According to the Checkmarx Security Research Team, the bugs are a user-data exposure vulnerability and an...
Vulnerabilities fixed in IBM AIX kernel and Java SDK
Vulnerabilities have been fixed in IBM AIX versions 7.1-7.3. The vulnerabilities in the kernel with attributes CVE-2021-38994 and CVE-2021-38995 allow a malicious person to perform perform denial-of-service DoS attacks from a user with low privileges. This is caused by user input that is...
SUSE: Security Advisory (SUSE-SU-2022:0552-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unspecified vulnerability in livehelperchat (CNVD-2022-13348)
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A security vulnerability exists in versions prior to livehelperchat 3.92v that stems from a user control key authorization bypass. No details of the vulnerability are provided at...
SUSE SLES15: kernel-livepatch-5_3_18-150300_59_43-default / etc (SUSE-SU-2022:0429-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:0429-1 advisory. This update for the Linux Kernel 5.3.18-1503005943 fixes one issue. The following security issue was fixed: - CVE-2022-0435: Fixed remote stack overflo...
livehelperchat 跨站脚本漏洞
livehelperchat is available through Live Helper Chat, which provides free live support on the website. livehelperchat 3.93v previously had a cross-site scripting vulnerability that stemmed from the lack of proper validation of client-side data by the WEB application, which could be exploited by a...
