CVE-2022-0619: Improper Neutralization of Input During Web Page Generation

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin Database Peek 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress...

Database Peek <= 1.2 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. https://example.com/wp-admin/admin.php?page=ab-database-peek&table=wpusers&match="...

Database Peek <= 1.2 - Reflected Cross-Site Scripting

The plugin does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting. PoC https://example.com/wp-admin/admin.php?page=ab-database-peek=wpusers="...

WordPress Database Peek plugin <= 1.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ran Crane in WordPress Database Peek plugin versions = 1.2. Solution Deactivate and delete. This plugin has been closed as of February 15, 2022 and is not available for download. This closure is temporary, pending a full review...

peek-a-boo-magazine.be Cross Site Scripting vulnerability OBB-2288405

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-11428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to integer overflows in the radix tree code, specifically in the peek function in lib/generic-radix-tree.c. This occurred when new inode numbers were spread througho...

yaml-cpp: Denial of service

Background yaml-cpp is a YAML parser and emitter in C++. Description The function Scanner::peek in scanner.cpp may have an assertion failure. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known workaround at this time. Resolution All yaml-cpp users...

July 7, 2020, update for Office 2016 (KB4484174)

None None...

stb heap buffer overflow vulnerability

stb is a C/C++ library consisting of a single file. A heap buffer overflow vulnerability exists in stbttbufpeek8 in stbtruetype.h in stb 1.22 and earlier versions. An attacker can exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...

UBUNTU-CVE-2020-6622

stb stbtruetype.h through 1.22 has a heap-based buffer over-read in stbttbufpeek8...

The vulnerability of the Qualcomm Storage Services component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Storage Services component in the Android operating system is related to the “SKIPSECBOOTCHECKNOTRECOMMENDEDBYQUALCOMM” flag being enabled in the standard configuration of BOOT.BF.3.0. Exploiting this vulnerability allows a remote attacker to compromise the...

Tencent RapidJSON Buffer Error Vulnerability

Tencent RapidJSON is a C++-based JSON parser/generator . A buffer overflow vulnerability exists in the 'Peek' function of the stream.h file in Tencent RapidJSON version 1.1.0. An attacker can exploit this vulnerability to cause an out-of-bounds read...

Samsung Patches Six Critical Bugs in Flagship Handsets

Samsung began rolling out patches over the weekend to fix six critical bugs found in its flagship Android handsets as part of its May patch bulletin. Flaws range from a remote code execution bug to a buffer overflow vulnerability, plus a peek-and-poke command bug that leaves memory locations open...

yaml-cpp denial of service vulnerability

yaml-cpp aka LibYaml-C++ is a C++ parser for use in YAML. A security vulnerability exists in the 'Token& Scanner::peek' function in the scanner.cpp file in yaml-cpp 0.5.3 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service assertion failure and application...

Denial of Service Vulnerability in WPS Office 2016 Sneak Peek Version

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial-of-service vulnerability exists in WPS Office 2016 Sneak Peek Edition when handling special PPT files, which can be exploited by attackers to launch denial-of-service attacks...

The vulnerability of the microprogrammed software of the wireless video camera Lens Peek-a-View lies in the presence of pre-set accounts, which allow a intruder to gain access to the device.

The microprogramming software of the wireless video camera Lens Peek-a-View has vulnerabilities. There are pre-installed user accounts named “admin” with the password “2601hx” for access via UART, and user accounts named “user” and “guest” with passwords “user” and “guest” respectively for access...

Denial Of Service (DoS)

Yaml-cpp is vulnerable to denial of service DoS attacks. The Token& Scanner::peek function in scanner.cpp may cause an assertion failure and application exit through a !2 string...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string. Details Denial of...

CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...