PT-2021-16307

Name of the Vulnerable Software and Affected Versions: Accept Donations with PayPal WordPress plugin versions prior to 1.3.2 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks due to the Amount Menu Name field of created Buttons not being properly escaped,...

CVE-2021-24815: Improper Neutralization of Input During Web Page Generation

The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-3519

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...

Design/Logic Flaw

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...

CVE-2021-3519

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...

CVE-2021-3519

CVE-2021-3519 affects some Lenovo Desktop models where enabling the BIOS setting “BIOS Password At Boot Device List” (Yes) can allow unauthorized access to the boot menu. The vulnerability is described as a physical-access issue with impact on confidentiality, integrity, and availability (CVSSv3....

CVE-2021-3519: Improper Authentication

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...

PT-2021-20828

Name of the Vulnerable Software and Affected Versions: Lenovo Desktop models affected versions not specified Description: A vulnerability was reported that could allow unauthorized access to the boot menu when the BIOS Password At Boot Device List BIOS setting is set to Yes. Recommendations: For...

ThinkStation Authorization Issues Vulnerability

Lenovo ThinkStation is a desktop workstation from the Chinese company Lenovo. An authorization issue vulnerability exists in ThinkStation, which can be exploited to gain unauthorized access to the boot menu when "BIOS Password At Boot Device List" is set to True...

Mozilla Firefox Security Advisory (MFSA2015-49) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

WordPress Restaurant Menu by MotoPress Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Restaurant Menu by MotoPress Plugin in version 2.4.0 and earlier has a cross-site scripting...

Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

GHSA-93C4-VF86-3RJ7 Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0.rc3), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (0.1) +108 more potentially affected by CVE-2021-33611 via org.webjars.bowergithub.vaadin:vaadin-menu-bar (>=1.0.3, <=1.2.0)

org.webjars.bowergithub.vaadin:vaadin-menu-bar MAVEN version =1.0.3, =1.0.0.m1, =1.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.5.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.2.3 and more Source cves: CVE-2021-33611 Source advisory: OSV:GHSA-93C4-VF86-3RJ7...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0.rc3), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (0.1) +108 more potentially affected by CVE-2021-33611 via org.webjars.bowergithub.vaadin:vaadin-menu-bar (>=1.0.3, <=1.2.0)

org.webjars.bowergithub.vaadin:vaadin-menu-bar MAVEN version =1.0.3, =1.0.0.m1, =1.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.5.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.2.3 and more Source cves: CVE-2021-33611 Source advisory: GHSA-93C4-VF86-3RJ7...

Cross-site Scripting (XSS)

vaadin-menu-bar is vulnerable to cross-site scripting. The vulnerability exists due to the lack of output sanitization in test sources, which allows an attacker to execute malicious javascript in the browser by opening the crafted URL...

CVE-2021-33611

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

CVE-2021-33611

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0.rc3), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (0.1) +108 more potentially affected by CVE-2021-33611 via org.webjars.bowergithub.vaadin:vaadin-menu-bar (>=1.0.3, <=1.2.0)

org.webjars.bowergithub.vaadin:vaadin-menu-bar MAVEN version =1.0.3, =1.0.0.m1, =1.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.5.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.2.3 and more Source cves: CVE-2021-33611 Source advisory: MEND:CVE-2021-33611...

CVE-2021-33611: Improper Neutralization of Input During Web Page Generation

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...