WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

Software Bulk NoIndex & NoFollow Toolkit Type Plugin Vulnerable versions = 1.42 Fixed in 1.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45065 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bb820b4a4cd3 Credits Phd...

WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

Software Form Maker by 10Web Type Plugin Vulnerable versions = 1.15.18 Fixed in 1.15.19 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-45071 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 40c5a2d21d33 Credits RE-ALTER Required...

WordPress WPGetAPI Plugin 2.1.0-2.2.1 is vulnerable to Broken Access Control

Software WPGetAPI Type Plugin Vulnerable versions 2.1.0-2.2.1 Fixed in 2.2.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID ca2d9e4727c6 Credits Unknown Required privilege Subscriber...

libxml2:html: Heap-buffer-overflow in xmlDictLookupInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=5231780321689600 Project: libxml2 Fuzzing Engine: afl Fuzz Target: html Job Type: aflasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x619000014498 Crash Stat...

libxml2:valid: Use-of-uninitialized-value in xmlParseStartTag2

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4844822290366464 Project: libxml2 Fuzzing Engine: libFuzzer Fuzz Target: valid Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

mruby:mruby_fuzzer: Heap-buffer-overflow in pack_unpack

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=6019021453262848 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62f00000c420 Crash State:...

Electrolink FM/DAB/TV Transmitter Vertical Privilege Escalation

Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...

WordPress Tiger Forms Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Tiger Forms Type Plugin Vulnerable versions = 2.0.0 Fixed in 2.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44474 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5fe0f3839101 Credits SeungYongLee Required privilege...

binutils:fuzz_objdump: Heap-buffer-overflow in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5549487273410560 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61a0000005b1 Crash State: bfdgetl16 elf32armgetsyntheticsymtab...

openSUSE 15 Security Update : Cadence (openSUSE-SU-2023:0270-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0270-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

WordPress User Activity Log Pro Plugin < 2.3.4 is vulnerable to Cross Site Scripting (XSS)

Software User Activity Log Pro Type Plugin Vulnerable versions 2.3.4 Fixed in 2.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5167 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 89ef9c440ecf Credits Bartlomiej Mar...

WordPress Dreamfox Media Payment gateway per Product for Woocommerce Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)

Software Dreamfox Media Payment gateway per Product for Woocommerce Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44144 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c8d06a423a...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in cosm_create_key

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5148414486380544 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000287e Crash...

ffmpeg:ffmpeg_DEMUXER_fuzzer: Heap-buffer-overflow in cbs_h266_read_nal_unit

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5837632490569728 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

Fedora 37 : chromium (2023-b427f54e68)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b427f54e68 advisory. update to 117.0.5938.88 ---- update to 117.0.5938.62. Fixes following security issues: CVE-2023-4900 CVE-2023-4901 CVE-2023-4902 CVE-2023-4903...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6313665823113216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

mruby:mruby_fuzzer: Heap-buffer-overflow in read_tmpl

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5584468330807296 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000047d Crash State:...

Debian DSA-5499-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5499 advisory. - Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt v...

WordPress Super Store Finder Plugin <= 6.9.3 is vulnerable to Broken Access Control

Software Super Store Finder Type Plugin Vulnerable versions = 6.9.3 Fixed in 6.9.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-5054 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID 31fa9f5f6872 Credits Etharus Required...

WordPress Funnelforms Free Plugin < 3.4 is vulnerable to Cross Site Scripting (XSS)

Software Funnelforms Free Type Plugin Vulnerable versions 3.4 Fixed in 3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a66c581b7251 Credits Unknown Required privilege...