5930 matches found
USN-6539-1: python-cryptography vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that the python-cryptography Cipher.updateinto function would incorrectly accept objects with immutable buffers. This would result in corrupted output, contrary to expectations. This iss...
WordPress Oxygen Builder Plugin <= 4.9 is vulnerable to Remote Code Execution (RCE)
Software Oxygen Builder Type Plugin Vulnerable versions = 4.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Remote Code Execution RCE CVE CVE-2024-31380 Patch priority Medium CVSS severity Medium 9.9 Developer Claim ownership PSID 4b3933c6a6e8 Credits Snicco Required privilege Contributo...
libspdm:test_spdm_responder_chunk_send_ack: Heap-buffer-overflow in libspdm_test_responder_chunk_send_ack_case1
Project: https://github.com/DMTF/libspdm.git Detailed Report: https://oss-fuzz.com/testcase?key=6712269464469504 Project: libspdm Fuzzing Engine: libFuzzer Fuzz Target: testspdmresponderchunksendack Job Type: libfuzzerasanlibspdm Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
WordPress Themify – WooCommerce Product Filter Plugin < 1.4.4 is vulnerable to Cross Site Scripting (XSS)
Software Themify – WooCommerce Product Filter Type Plugin Vulnerable versions 1.4.4 Fixed in 1.4.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2263 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2af17750bb44 Credits...
WordPress Sticky Anything Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)
Software Sticky Anything Type Plugin Vulnerable versions = 2.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30551 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 25bb0e7db645 Credits Mika Required privilege...
WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Responsive Image Gallery, Gallery Album Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30550 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 40ddad95b8d8 Credits LVT-tholv2...
WordPress Header Image Slider Plugin <= 0.3 is vulnerable to Cross Site Scripting (XSS)
Software Header Image Slider Type Plugin Vulnerable versions = 0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30547 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 96f5b84d4f33 Credits Dimas Maulana Required privilege...
WordPress Tax Rate Upload Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Tax Rate Upload Type Plugin Vulnerable versions = 2.4.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31105 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 687c051f0fb1 Credits thiennv Required privilege...
WordPress Weekly Class Schedule Plugin <= 3.19 is vulnerable to Cross Site Scripting (XSS)
Software Weekly Class Schedule Type Plugin Vulnerable versions = 3.19 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31084 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9a05f9bc5077 Credits Dimas Maulana Required...
WordPress Christmas Greetings Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)
Software Christmas Greetings Type Plugin Vulnerable versions = 1.2.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2116 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 410abc2ecae6 Credits Lucio Sá Require...
WordPress Comic Easel Plugin <= 1.15 is vulnerable to Cross Site Scripting (XSS)
Software Comic Easel Type Plugin Vulnerable versions = 1.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31092 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ef1de760870 Credits Dimas Maulana Required privilege...
WordPress SP Project & Document Manager Plugin <= 4.70 is vulnerable to Broken Access Control
Software SP Project & Document Manager Type Plugin Vulnerable versions = 4.70 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31118 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d4072053f9aa Credits CatFather...
WordPress Contest Gallery Plugin <= 24.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Contest Gallery Type Plugin Vulnerable versions = 24.0.3 Fixed in 24.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30428 Patch priority Medium CVSS severity Medium 7.1 Developer Wasiliy Strecker PSID 36b896a600a2 Credits Dimas Maulana Required...
WordPress Brave Popup Builder Plugin <= 0.6.5 is vulnerable to Server Side Request Forgery (SSRF)
Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.5 Fixed in 0.6.6 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30453 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 8769cfe45747...
WordPress Preview E-mails for WooCommerce Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Preview E-mails for WooCommerce Type Plugin Vulnerable versions = 2.2.1 Fixed in 2.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b64b027ac25b Credits Rafie Muhammad...
WordPress Tumult Hype Animations Plugin <= 1.9.12 is vulnerable to Arbitrary File Upload
Software Tumult Hype Animations Type Plugin Vulnerable versions = 1.9.12 Fixed in 1.9.13 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-2890 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 406a74eb182d Credits Peng Zhou Required privileg...
WordPress Product Import Export for WooCommerce Plugin <= 2.4.1 is vulnerable to Arbitrary File Upload
Software Product Import Export for WooCommerce Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-30231 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 71fe96e51985 Credits stealthcopter...
WordPress Simply Schedule Appointments Plugin <= 1.6.6.20 is vulnerable to Cross Site Scripting (XSS)
Software Simply Schedule Appointments Type Plugin Vulnerable versions = 1.6.6.20 Fixed in 1.6.6.24 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22311 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fb6daf2f8c79 Credits Rafie Muhamma...
WordPress BEAR Plugin <= 1.1.4.2 is vulnerable to Cross Site Scripting (XSS)
Software BEAR Type Plugin Vulnerable versions = 1.1.4.2 Fixed in 1.1.4.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30200 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2c6d05b2fb54 Credits Rafie Muhammad Patchstack Required...
