Nextcloud 代码问题漏洞

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A code issue vulnerability exists in Nextcloud. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozila Firefox. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome is vulnerable to a competitive conditions issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

CVE-2022-27238

BigBlueButton version 2.4.7 or earlier is vulnerable to stored Cross-Site Scripting XSS in the private chat functionality. A threat actor could inject JavaScript payload in his/her username. The payload gets executed in the browser of the victim each time the attacker sends a private message to t...

Vulnerability fixed in libarchive

The developers of libarchive have fixed a vulnerability. The vulnerability allows a remote malicious party to view sensitive data or cause a denial-of-service DoS cause. To do so, the malicious party must induce a victim to install open a malicious and compressed file with an application that use...

WordPress plugin Responsive Menu 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. WordPress plugin Responsive Menu has a security vulnerability...

Yandex ClickHouse 数字错误漏洞

Yandex ClickHouse is an open source columnar database for online analytical processing from the Russian company Yandex. There is a security vulnerability in Yandex ClickHouse, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the vendor's announcement...

SAP Business Objects Business Intelligence Platform 信息泄露漏洞

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An information disclosure vulnerability exists in SAP Business Object...

WordPress Ant Admin Notices for Team plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ant Admin Notices for Team plugin versions = 1.0.4. Solution No patched version available...

WordPress Ant Admin Notices for Team plugin <= 1.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ant Admin Notices for Team plugin versions = 1.0.4. Solution No patched version available...

The vulnerability of the ~/admin/class-kjm-admin-notices-admin.php component of the KJM Admin Notices plugin for WordPress content management system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the /admin/class-kjm-admin-notices-admin.php component of the KJM Admin Notices plugin for WordPress management systems of WordPress websites is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious act...

CVE-2021-39344

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...

CVE-2021-39344

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...

Cross site scripting

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...

CVE-2021-39344 KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site Scripting

The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /admin/class-kjm-admin-notices-admin.php file which allowed attackers with administrative user access to inject arbitrary w...