openSUSE: Security Advisory for xen (openSUSE-SU-2020:0985-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for xen (important)

openSUSE Security Update: Security update for xen Announcement ID: openSUSE-SU-2020:0985-1 Rating: important References: 1027519 1172205 1173376 1173377 1173378 1173380 Cross-References: CVE-2020-0543 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 Affected Products: openSUSE Leap 15....

Shenzhen Jam Times Technology Co., Ltd. popular live-streaming APP has denial-of-service vulnerability

Popular Live App is a live streaming platform. There is a denial-of-service vulnerability in the Popularity Live APP of Shenzhen Jam Times Technology Co. Attackers can use the vulnerability to make the APP crash and stop running, resulting in a reboot of the phone...

Medium: texlive

Issue Overview: An issue was discovered in t1checkunusualcharstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips...

Fedora 32 : xen (2020-fbc13516af)

incorrect error handling in event channel port allocation leads to DoS XSA-317, CVE-2020-15566 1854465 inverted code paths in x86 dirty VRAM tracking leads to DoS XSA-319, CVE-2020-15563 1854463 xen: insufficient cache write-back under VT-d leads to DoS XSA-321, CVE-2020-15565 1854467 missing...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:1902-1)

This update for xen fixes the following issues : CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. CVE-2020-15566: Fixed incorrect error handling in event channel port allocation bsc1173376...

WP-Live Chat by 3CX < 8.2.0 - Authenticated Stored Cross-Site Scripting

There is a Stored Cross-Site Scripting XSS in WP-Live Chat by 3CX v. 8.1.9 By 3CX within the Quick Response function. Due to the nature of this vulnerability, a malicious attack with access to a WordPress multisite and permissions to this plugin can craft a malformed JavaScript payload. PoC...

WP-Live Chat by 3CX < 8.2.0 - Authenticated Stored Cross-Site Scripting

There is a Stored Cross-Site Scripting XSS in WP-Live Chat by 3CX v. 8.1.9 By 3CX within the Quick Response function. Due to the nature of this vulnerability, a malicious attack with access to a WordPress multisite and permissions to this plugin can craft a malformed JavaScript payload...

WordPress 3CX Live Chat plugin <= 8.1.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities discovered by Chevon Phillip in WordPress 3CX Live Chat plugin versions = 8.1.9. Solution Update the WordPress 3CX Live Chat plugin to the latest available version at least 8.2.0...

SQL Injection Vulnerability in sewise Live Streaming Server of Shenzhen Siliconware Technology Co.

Shenzhen Siwei Zhi Technology Co., Ltd. is a national high-tech enterprise focusing on streaming media cloud platform technology research and development. Shenzhen Siliconware Technology Co., Ltd. sewise live server SQL injection vulnerability, attackers can use the vulnerability to obtain databa...

CVE-2020-8520

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8521

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

Sql injection

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8521

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

Sql injection

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

Sql injection

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8521

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8521

CVE-2020-8521 describes an SQL injection in Phpzag’s DataTables Records.php (used for live add/edit/delete of records via Ajax). The vulnerability stems from unsafe handling of the start and length parameters in Records.php, enabling an attacker to manipulate SQL queries. Multiple sources (NVD, R...

CVE-2020-8519

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...

CVE-2020-8519

CVE-2020-8519 is a SQL injection in SpryMedia DataTables (Records.php) used by Phpzag’s live data tables (Ajax PHP/MySQL). The vulnerability arises from an unsafe search parameter in Records.php, enabling manipulation of table records. Documented scores indicate high to critical severity (CVSS v3...