DEBIAN-CVE-2020-8264

In actionpack gem = 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed in another page a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This...

Security Bulletin: Stored Cross-Site Scripting Vulnerability Affects IBM Emptoris Sourcing (CVE-2020-4895)

Summary Cross-Site Scripting Stored affects IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-4895 DESCRIPTION: IBM Emptoris is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

Security Bulletin: Forced Submit Using GET Vulnerability Affects IBM Emptoris Strategic Supply Management Platform (CVE-2020-4893)

Summary Web form forced to submit using GET method vulnerability affects IBM Emptoris Strategic Supply Management Platform. Vulnerability Details CVEID: CVE-2020-4893 DESCRIPTION: IBM Emptoris transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure...

Security Bulletin: Reflected Cross-site Scripting Vulnerability Affects IBM Emptoris Contract Management (CVE-2020-4892)

Summary Cross-site Scripting Reflected affects IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-4892 DESCRIPTION: IBM Emptoris is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

WordPress All in One SEO Pack plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress All in One SEO Pack plugin prior to version...

WordPress File Upload Vulnerability (CNVD-2021-29447)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.One SEO Pack is a plugin for WordPress. A security vulnerability exists in One SEO Pack plugin for WordPress versions...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise (CVE-2020-15168)

Summary IBM App Connect Enterprise ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details CVEID: CVE-2020-15168 DESCRIPTION: Node.js node-fetch module is vulnerable to a denial of service, caused by the...

Security Bulletin: Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information.

Summary Vulnerability in IBM WebSphere eXtreme Scale Liberty Deployment could expose sensitive information. Vulnerability Details CVEID: CVE-2020-4336 DESCRIPTION: IBM WebSphere Extreme Scale stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized...

Security Bulletin: A security vulnerability has been identified inPCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2019-20838)

Summary A security vulnerability has been disclosed in the pcre library libpcre, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-20838 DESCRIPTION: PCRE is...

Security Bulletin: A security vulnerability has been identified in PCRE, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-14155)

Summary A security vulnerability has been disclosed in the pcre library libpcre, which is installed as part of IBM Tivoli Network Manager version 4.2. Information about this vulnerability has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-14155 DESCRIPTION: PCRE coul...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

Cross site scripting

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

CVE-2020-35946

The CVE-2020-35946 issue affects the WordPress plugin All in One SEO Pack up to version 3.6.2. It arises from unsanitized input in the SEO Description and SEO Title fields, enabling stored XSS from a Contributor and affecting post pages in the admin area. The documented impact is stored XSS; expl...

CVE-2020-35946: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS...

PT-2021-11878

Name of the Vulnerable Software and Affected Versions: All in One SEO Pack plugin versions prior to 3.6.2 Description: The issue is related to unsanitized input in the SEO Description and Title fields, which can lead to stored XSS when a Contributor provides malicious input. Recommendations: For...

WordPress 代码问题漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.One SEO Pack is a plugin for WordPress. A security vulnerability exists in One SEO Pack plugin for WordPress versions...

DEBIAN-CVE-2020-35738

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in packutils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected...

HPE iLO Amplifier Pack server Remote Code Execution Vulnerability

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

Description of Visual Studio 2010 Service Pack 1

Describes information about Visual Studio 2010 Service Pack 1 SP1. Additionally, this article lists the fixed issues and added technology enhancements in Visual Studio 2010 SP1.NoticeSome of the downloads that are mentioned in this article are currently available on My.VisualStudio.com. This...