WordPress Woocommerce Customers Order History Plugin <= 5.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Woocommerce Customers Order History Type Plugin Vulnerable versions = 5.2.1 Fixed in 5.2.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3720c02990cd Credits Rafie Muhamm...

WordPress Premmerce WooCommerce Toolkit Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Premmerce WooCommerce Toolkit Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4559e551f8bb Credits Rafie Muhammad...

WordPress Mapster WP Maps Plugin < 1.2.36 is vulnerable to Cross Site Scripting (XSS)

Software Mapster WP Maps Type Plugin Vulnerable versions 1.2.36 Fixed in 1.2.36 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 42d3f06779ba Credits Rafie Muhammad Patchstack Requir...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in cosm_new_file

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5037763857350656 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000287f Crash...

WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)

Software CartFlows Pro Type Plugin Vulnerable versions = 1.11.11 Fixed in 1.11.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36686 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fde18e13d181 Credits Rafie Muhammad...

PaulPrinting CMS - (Search Delivery) Cross Site Vulnerability

Document Title: =============== PaulPrinting CMS - Search Delivery Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2286 Release Date: ============= 2023-07-16 Vulnerability Laboratory ID VL-ID: ==================================...

ndpi:fuzz_ndpi_reader: Negative-size-param in check_content_type_and_change_protocol

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5778695863009280 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireader Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...

WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Authors List Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-37981 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 38312864f014 Credits LEE SE HYOUNG hackintoanetwork...

Virtuozzo Hybrid Infrastructure 5.4 Update 3 Hotfix 1 (5.4.3-102)

This update provides important security fixes. Vulnerability id: VSTOR-71357 Fixes for three high-severity and six medium-severity security vulnerabilities...

libyal:libscca_file_fuzzer: Heap-buffer-overflow in libscca_filename_strings_read_data

Detailed Report: https://oss-fuzz.com/testcase?key=5554709862416384 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libsccafilefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000151 Crash State:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::DnsResource::getDataLength

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5788261117984768 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

Citrix Gateway And Cloud MFA Insufficient Session Validation

Document Title: =============== Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2324 Vulnerability...

WordPress Kingkong Board Plugin <= 2.1.0.2 is vulnerable to Broken Access Control

Software Kingkong Board Type Plugin Vulnerable versions = 2.1.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36694 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 592012ceca48 Credits Abdi Pranata Required...

CVE-2023-3497

Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-use-after-free in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5039469976485888 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

skia-ftz:image_filter_deserialize: Use-of-uninitialized-value in make_lighting

Detailed Report: https://oss-fuzz.com/testcase?key=6509708954173440 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserialize Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: makelighting...

serenity:FuzzVP9Decoder: Heap-buffer-overflow in Gfx::BooleanDecoder::initialize

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5846892286967808 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzVP9Decoder Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

libjpeg-turbo:transform_fuzzer_2_0_x: Use-of-uninitialized-value in encode_one_block

Detailed Report: https://oss-fuzz.com/testcase?key=6750311948353536 Project: libjpeg-turbo Fuzzing Engine: libFuzzer Fuzz Target: transformfuzzer20x Job Type: libfuzzermsanlibjpeg-turbo Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: encodeoneblock...

imagemagick:enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4862836426539008 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

USN-6104-1: PostgreSQL vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the...