Arbitrary Code Execution

wordpress is vulnerable to arbitrary code execution. The vulnerability exists in the wpattachedfile post meta entry when a user with author privilege passes a malicious image with exif metadata causing the Post Meta entry to change to an arbitrary substring such as a .jpg?file.php...

DEBIAN-CVE-2019-8942

WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an wpattachedfile Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image...

CVE-2019-8942

WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an wpattachedfile Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image...

PT-2019-6307

Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.4 Jira versions 8.0.0 through 8.0.3 Jira versions 8.1.0 Description The issue is related to the CachingResourceDownloadRewriteRule class, which allows remote attackers to access files in the Jira webroot under the...

WordPress Import users from CSV with meta Plugin < 1.12.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112516";...

[SECURITY] Fedora 29 Update: kernel-4.20.8-200.fc29

The kernel meta package...

[SECURITY] Fedora 29 Update: kernel-4.20.6-200.fc29

The kernel meta package...

Meta Box < 4.16.3 - Unauthorised File Deletion

The Meta Box – WordPress Custom Fields Framework WordPress plugin was affected by an Unauthorised File Deletion security vulnerability...

[SECURITY] Fedora 29 Update: kernel-4.20.5-200.fc29

The kernel meta package...

[SECURITY] Fedora 28 Update: kernel-4.20.5-100.fc28

The kernel meta package...

Meta Box < 4.16.2 - Mishandled Uploaded Files

The Meta Box – WordPress Custom Fields Framework WordPress plugin was affected by a Mishandled Uploaded Files security vulnerability...

USN-3871-2 linux regression

USN-3871-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, that update introduced regressions with docking station displays and mounting ext4 file systems with the metabg option enabled. This update fixes the problems. We apologize for the inconvenience. Original...

[SECURITY] Fedora 28 Update: kernel-4.19.16-200.fc28

The kernel meta package...

Path Traversal

github.com/kubernetes/kubernetes is vulnerable to path traversal attacks. The attacks are possible because it does not validate the names of all object types ObjectMeta in BeforeCreate before passing them to etcd to generate etcd key...

Authorization Bypass

openstack-glance is vulnerable to authorization bypass. A flaw was discovered in the OpenStack Image service where a tenant could manipulate the status of their images by submitting an HTTP PUT request together with an 'x-image-meta-status' header. A malicious tenant could exploit this flaw to...

[SECURITY] Fedora 29 Update: kernel-4.19.14-300.fc29

The kernel meta package...

[SECURITY] Fedora 28 Update: kernel-4.19.10-200.fc28

The kernel meta package...

meta-preisvergleich.de XSS vulnerability

Open Bug Bounty ID: OBB-712421 Description| Value ---|--- Affected Website:| meta-preisvergleich.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

PT-2022-26722 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf isom meta restore items ref at /isomedia/meta.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master...

PT-2022-26726 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf isom get meta item info at /isomedia/meta.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, as...