7639 matches found
Improper Handling of Length Parameter Inconsistency
Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency in the Pdfinfo component. An attacker can cause a crash by passing in malicious input and using the dtests parameter. Remediation Upgrade poppler to version 25.11.0 or higher. Referenc...
SUSE CVE-2022-48723
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error paths in uniphierspiprobe. When either dmagetslavecaps or devmspiregistermaster returns an error code, the function forgets to decreas...
ASUS Download Master Cross-Site Scripting Vulnerability (CNVD-2024-29352)
ASUS Download Master is a download program from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Download Master, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload...
ASUS Download Master Buffer Overflow Vulnerability
ASUS Download Master is a download program from the Chinese company Asus ASUS. A buffer overflow vulnerability exists in ASUS Download Master. The vulnerability stems from a boundary error when the application handles untrusted input. An attacker could exploit the vulnerability to execute arbitra...
ASUS Download Master Cross-Site Scripting Vulnerability
ASUS Download Master is a download program from the Chinese company Asus ASUS. A cross-site scripting vulnerability exists in ASUS Download Master version 3.1.0.113 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be...
CVE-2024-37222
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
CVE-2024-37222
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
CVE-2024-37222 WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
CVE-2024-37222
Technical details about CVE-2024-37222 are not provided in the connected documents. The initial description mentions Reflected XSS in Master Slider up to 3.10.0, but no product/version specifics or mitigations are confirmed here. Monitor for updates.
CVE-2024-37222 WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability in Averta Master Slider allows Reflected XSS.This issue affects Master Slider: from n/a through 3.10.0...
WordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Master Slider versions = 3.10.0...
DEBIAN-CVE-2022-48742
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh masterdev/mops in rtnlnewlink While looking at one unrelated syzbot bug, I found the replay logic in rtnlnewlink to potentially trigger use-after-free. It is better to clear masterdev and mops insi...
PT-2024-27391 · Unknown · Averta Master Slider
Name of the Vulnerable Software and Affected Versions: Averta Master Slider versions 3.9.10 through 3.10.0 Description: The issue is a Cross Site Scripting XSS vulnerability, specifically Reflected XSS, in Averta Master Slider. This type of vulnerability allows an attacker to inject malicious...
WordPress plugin Averta Master Slider security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
WordPress Master Slider Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)
Software Master Slider Type Plugin Vulnerable versions = 3.10.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37222 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 90295bc054b8 Credits Rafie Muhammad Patchstack Required...
CVE-2023-50900
Cross-Site Request Forgery CSRF vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10...
CVE-2023-50900
Cross-Site Request Forgery CSRF vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10...
CVE-2023-50900
CVE-2023-50900 affects the WordPress Master Slider plugin (versions <= 3.9.10). The vulnerability is a Cross-Site Request Forgery (CSRF) in Master Slider, with CVSSv3.1 base score 4.3 (NETWORK attack vector, LOW complexity, NONE confidentiality/availability impact, LOW integrity impact; user i...
CVE-2023-50900 WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10...
CVE-2023-50900 WordPress Master Slider plugin <= 3.9.10 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a through 3.9.10...