CVE-2023-31236 WordPress Scripts n Styles Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in unFocus Projects Scripts n Styles plugin = 3.5.7 versions...

AZL-27020 CVE-2023-2253 affecting package cert-manager for versions less than 1.11.2-14

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

UBUNTU-CVE-2023-2253

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

Android Security Bulletin—June 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-06-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

CVE-2023-27387

Cross-site request forgery CSRF in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger...

CVE-2023-22709

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

CVE-2023-22709

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Atif N SRS Simple Hits Counter plugin = 1.1.0 versions...

CVE-2023-22709

CVE-2023-22709 is a CSRF vulnerability in the WordPress plugin SRS Simple Hits Counter (versions

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

ESPEC MIC多款产品跨站脚本漏洞

ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in several ESPEC MIC products, which can be exploited by an attacker to execute arbitrary scripts on a logged-in user's web browser. The following products and versions are affected: ESPEC MIC:...

ESPEC MIC多款产品授权问题漏洞

ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in the ESPEC MIC RT-12N/RS-12N, RT-22BN, and TEU-12N, which stems from incorrect authentication and can be exploited by an attacker to log in as a legitimate user...

ESPEC MIC多款产品跨站请求伪造漏洞

The ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in the Especmic RT-12N/RS-12N, RT-22BN, and TEU-12N, which originates from cross-site request forgery CSRF and can be exploited by an attacker to perform an unexpected operation on the targ...

WordPress Scripts n Styles Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Scripts n Styles Type Plugin Vulnerable versions = 3.5.7 Fixed in 3.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-31236 Patch priority Low CVSS severity Low 5.9 Developer unFocus Projects PSID 915405d90808 Credits konagash Required...

EulerOS 2.0 SP10 : harfbuzz (EulerOS-SA-2023-1977)

According to the versions of the harfbuzz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking...

EulerOS 2.0 SP9 : harfbuzz (EulerOS-SA-2023-1871)

According to the versions of the harfbuzz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking...

VulnCheck KEV: CVE-2014-0196

Linux Kernel contains a race condition vulnerability within the nttywrite function that allows local users to cause a denial-of-service DoS or gain privileges via read and write operations with long strings...

Huawei EulerOS: Security Advisory for harfbuzz (EulerOS-SA-2023-1871)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-22529 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: Libming swftophp version 0.4.8 Description: A Buffer Overflow issue allows a local attacker to cause a denial of service via the newVar N function in util/decompile.c. This issue can be exploited to disrupt service. Recommendations: For Libmi...

PT-2023-6953 · Docker +4 · Docker Distribution +4

Name of the Vulnerable Software and Affected Versions: distribution versions prior to 2.8.2-beta.1 Description: A flaw was found in the /v2/ catalog endpoint, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to...