5781 matches found
CVE-2022-46148 Discourse allows self-XSS through malicious composer message
Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...
CVE-2022-45278
creationtimestamp| type| source ---|---|--- 2022-11-24 00:14:19+00:00| seen| https://t.me/cibsecurity/53468...
CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...
CVE-2022-40216
CVE-2022-40216 affects the WordPress Better Messages plugin. Affected versions are
CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...
CVE-2022-43673
Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...
CVE-2022-40216: Improper Access Control
Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...
PT-2022-25288 · WordPress · Bp Better Messages
Name of the Vulnerable Software and Affected Versions: Better Messages plugin versions = 1.9.10.69 Description: The issue is related to an authentication bypass vulnerability in the Better Messages plugin for WordPress, specifically affecting messaging block functionality for subscribers and abov...
org.jenkins-ci.plugins:test-results-aggregator (>=1.0.0, <=1.1.7), org.jvnet.hudson.plugins:instant-messaging (>=1.37, <=1.39) +1 more potentially affected by CVE-2022-45380 via org.jenkins-ci.plugins:junit (1.7)
org.jenkins-ci.plugins:junit MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:test-results-aggregator =1.0.0, =1.37, =2.31, =2.33 Source cves: CVE-2022-45380...
PT-2022-35133 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the rpmsg char, where a double destroy of the default endpoint can occur. This problem was introduced in version v5.18 and is fixed in Linux Kernel version v6.0.3. The...
CVE-2022-41913
CVE-2022-41913 affects the Discourse-calendar plugin for Discourse. When discourse_post_event_enabled is on, users can list members of private groups or private-group members in dynamic calendar posts, enabling disclosure of group membership. The issue is mitigated by upgrading to a version that ...
[SECURITY] Fedora 37 Update: dbus-1.14.4-1.fc37
D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...
WordPress Better Messages plugin <= 1.9.10.69 - Messaging Block Bypass vulnerability
Messaging Block Bypass vulnerability discovered by Dhakal Ananda Patchstack Alliance in WordPress Better Messages plugin versions = 1.9.10.69. Solution Update the WordPress BP Better Messages plugin to the latest available version at least 1.9.10.71...
Better Messages < 1.9.10.71 - Subscriber+ Messaging Block Bypass
The plugin does not properly block messages, which could allow subscriber and above role to bypass the block system in place...
artemis-commons: Apache ActiveMQ Artemis DoS
In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability DoS through uncontrolled resource consumption of memory...
CVE-2022-40287
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting XSS vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account...
Cross site scripting
The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting XSS vulnerability in messaging functionality, leading to privilege escalation or a compromise of a targeted account...
CVE-2022-40287
The CVE-2022-40287 entry refers to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in PHP Point of Sale, version 19.0, within the messaging functionality. The available connected documents confirm the vulnerability allows privilege escalation or compromise of a targeted account v...