Debian: Security Advisory (DSA-5565-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2023:0379-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow bsc1213126...

Debian DSA-5565-1 : gst-plugins-bad1.0 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5565 advisory. Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or...

Security update for gstreamer-plugins-bad (important)

openSUSE Security Update: Security update for gstreamer-plugins-bad Announcement ID: openSUSE-SU-2023:0379-1 Rating: important References: 1213126 Cross-References: CVE-2023-37329 CVSS scores: CVE-2023-37329 SUSE: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap...

DSA-5565-1 gst-plugins-bad1.0 - security update

Bulletin has no description...

Wordfence Intelligence Weekly WordPress Vulnerability Report (November 13, 2023 to November 19, 2023)

Wordfence just launched its bug bounty program. For the first 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Last week, there were 126 vulnerabilities disclosed in 102 WordPress Plugins and 2 WordPress themes that have been added to the Wordfence...

WordPress WordPress Team Members – GS Plugins Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Team Members – GS Plugins Type Plugin Vulnerable versions = 2.2.3 Fixed in 2.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 74a732ebddc0 Credits Unknown Requir...

Ashe Extra <= 1.2.9 - Subscriber+ Companion Plugin Activation & Content Import

Description The plugin does not have authorisation in various AJAX actions, allowing any authenticated user, such as subscribers to call them, and activate companion plugins as well as import content...

CVE-2023-47814

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Waterloo Plugins BMI Calculator Plugin plugin = 1.0.3 versions...

CVE-2023-47814

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Waterloo Plugins BMI Calculator Plugin plugin = 1.0.3 versions...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Waterloo Plugins BMI Calculator Plugin plugin = 1.0.3 versions...

CVE-2023-47814

CVE-2023-47814 corresponds to the BMI Calculator Plugin for WordPress (Waterloo Plugins) ≤ 1.0.3, with an authenticated (Contributor+) Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Public exploit details are not provided in the...

CVE-2023-27461

Cross-Site Request Forgery CSRF vulnerability in Yoohoo Plugins When Last Login plugin = 1.2.1 versions...

CVE-2023-27461

Cross-Site Request Forgery CSRF vulnerability in Yoohoo Plugins When Last Login plugin = 1.2.1 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Yoohoo Plugins When Last Login plugin = 1.2.1 versions...

CVE-2023-27461 WordPress When Last Login Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Yoohoo Plugins When Last Login plugin = 1.2.1 versions...

CVE-2023-27461

CVE-2023-27461 is a CSRF vulnerability in the WordPress plugin When Last Login (

PT-2023-30624 · Waterloo Plugins · Waterloo Plugins Bmi Calculator Plugin

Name of the Vulnerable Software and Affected Versions: Waterloo Plugins BMI Calculator Plugin versions 1.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For versions 1.0.3 an...

The vulnerability of the EventOn Lite and EventON plugins of the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the EventOn Lite and EventON plugins of the WordPress content management system is related to a processing error in authentication keys controlled by users. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Debian DSA-5560-1 : strongswan - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5560 advisory. Florian Picca reported a bug in the charon-tkm daemon in strongSwan an IKE/IPsec suite. The TKM-backed version of the charon IKE daemon charon-tkm doesn't check the...