WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

Software Folders Type Plugin Vulnerable versions = 2.9.2 Fixed in 2.9.3 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-40204 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID c5881308f6ec Credits Rafie Muhammad Patchstack Required privileg...

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)

Software URL Shortener by MyThemeShop Type Plugin Vulnerable versions = 1.0.17 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30472 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 80afaaa30ec4 Credits LEE S...

WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)

Software WP Search Analytics Type Plugin Vulnerable versions = 1.4.7 Fixed in 1.4.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30471 Patch priority Medium CVSS severity Medium 7.1 Developer Cornel Raiu PSID 0393f18cf90d Credits LEE SE HYOUNG...

WordPress FV Flowplayer Video Player Plugin <= 7.5.37.7212 is vulnerable to Cross Site Scripting (XSS)

Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.37.7212 Fixed in 7.5.39.7212 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4520 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d232095d565d...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in Flow::dissectBittorrent

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=4838118470320128 Project: ntopng Fuzzing Engine: afl Fuzz Target: fuzzdissectpacket Job Type: aflasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c0000027bf Crash...

FreeBSD : chromium -- multiple vulnerabilities (5fa332b9-4269-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5fa332b9-4269-11ee-8290-a8a1599412c6 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote...

libxaac:xaac_dec_fuzzer: Use-of-uninitialized-value in ixheaacd_cos_sin_mod

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=5286408334737408 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacdecfuzzer Job Type: libfuzzermsanlibxaac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2023-4431

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4431

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4431

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

WordPress FTP Access Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software FTP Access Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3510 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bb5fc394892e Credits Bob Matyas Required privile...

WordPress Min Max Control Plugin < 4.6 is vulnerable to Cross Site Scripting (XSS)

Software Min Max Control Type Plugin Vulnerable versions 4.6 Fixed in 4.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4270 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f355d50b63c9 Credits Animesh Gaurav Required...

CVE-2023-4431

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4431

Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

Advisory ROSA-SA-2023-2219

software: tor 0.4.6.10 OS: ROSA-CHROME packageevrstring: tor-0.4.6.10-2.src.rpm CVE-ID: CVE-2023-23589 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: The SafeSocks option in Tor before version 0.4.7.13 has a logic error that can use the insecure SOCKS4 protocol, but not the secure SOCKS4a protocol, aka...

WordPress Slimstat Analytics Plugin <= 5.0.5.1 is vulnerable to Broken Access Control

Software Slimstat Analytics Type Plugin Vulnerable versions = 5.0.5.1 Fixed in 5.0.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33994 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d67efaa57590 Credits Rafshanzani Suhada...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 5 security fixes: 1469542 High CVE-2023-4430: Use after free in Vulkan. Reported by Cassidy Kim@cassidy6564 on 2023-08-02 1469754 High CVE-2023-4429: Use after free in Loader. Reported by Anonymous on 2023-08-03 1470477 High CVE-2023-4428: Out of boun...

WordPress Master Addons for Elementor Plugin <= 2.0.5.3 is vulnerable to Broken Access Control

Software Master Addons for Elementor Type Plugin Vulnerable versions = 2.0.5.3 Fixed in 2.0.5.4.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-40679 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6468506a04c1 Credits...

WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)

Software Simple URLs Type Plugin Vulnerable versions = 117 Fixed in 118 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40667 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc177aa51fb0 Credits Rafshanzani Suhada Requir...

ntopng:fuzz_dissect_packet: Heap-buffer-overflow in IEC104Stats::processPacket

Project: https://github.com/ntop/ntopng.git Detailed Report: https://oss-fuzz.com/testcase?key=5073288106475520 Project: ntopng Fuzzing Engine: honggfuzz Fuzz Target: fuzzdissectpacket Job Type: honggfuzzasanntopng Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...