CVE-2024-6517

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users...

CVE-2024-6517

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users...

CVE-2024-6517

The CVE concerns the WordPress plugin Contact Form 7 Math Captcha, affected versions

WordPress Contact Form 7 Math Captcha Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form 7 Math Captcha Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6517 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1067711fa4c4 Credits...

CVE-2024-6517: Improper Neutralization of Input During Web Page Generation

The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users...

WordPress plugin Contact Form 7 Math Captcha 安全漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-37683 · WordPress · Contact Form 7 Math Captcha

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Math Captcha WordPress plugin versions 2.0.1 and earlier Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the...

In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

...

CVE-2024-43404 Remote Code Execution Vulnerability in MEGABOT

MEGABOT is a fully customized Discord bot for learning and fun. The /math command and functionality of MEGABOT versions 1.5.0 contains a remote code execution vulnerability due to a Python eval. The vulnerability allows an attacker to inject Python code into the expression parameter when using...

CVE-2024-43404 Remote Code Execution Vulnerability in MEGABOT

MEGABOT is a fully customized Discord bot for learning and fun. The /math command and functionality of MEGABOT versions 1.5.0 contains a remote code execution vulnerability due to a Python eval. The vulnerability allows an attacker to inject Python code into the expression parameter when using...

PT-2024-30562 · Megabot +1 · Megabot +1

Name of the Vulnerable Software and Affected Versions: MEGABOT versions prior to 1.5.0 Description: The /math command in MEGABOT contains a remote code execution issue due to a Python eval function. This allows an attacker to inject Python code into the expression parameter when using /math in an...

CVE-2024-21766

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21766

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21766

CVE-2024-21766 involves an uncontrolled search path in Intel® oneAPI Math Kernel Library (MKL) software before version 2024.1, which may allow an authenticated local user to escalate privileges. Connected sources confirm affected products: Intel® oneAPI MKL and Intel® oneAPI Base Toolkit prior to...

CVE-2024-21766

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-19044 · Intel · Intel Oneapi Math Kernel Library

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Math Kernel Library versions prior to 2024.1 Description: The issue is related to an uncontrolled search path in some IntelR oneAPI Math Kernel Library software. This may allow an authenticated user to potentially enable...

CVE-2024-21766: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

wolfssl:cryptofuzz-normal-math: Use-of-uninitialized-value in Botan::IntMod<Botan::PCurve::Secp256r1Rep<Botan::EllipticCurve<Botan::PCurve::se

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5851619005104128 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

wolfssl:cryptofuzz-normal-math: Use-of-uninitialized-value in Botan::ProjectiveCurvePoint<Botan::IntMod<Botan::PCurve::secp256k1::Secp256k1Rep

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5355196484485120 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-normal-math Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

RHEL 7 : etcd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - golang: net: lookup functions may return invalid host names CVE-2021-33195 - In Go before 1.15.13 and...