Security Bulletin: Vulnerabilities in urllib3, Python and Tornado can affect IBM Storage Protect Plus Microsoft File Systems Backup and Restore [CVE-2023-43804,CVE-2023-40217,263690]

Summary IBM Storage Protect Plus Microsoft File Systems Backup and Restore can be affected by vulnerabilities in urllib3, Python and Tornado which include obtaining sensitive information, bypass security restrictions and bypass web application firewall protection, and conduct XSS attacks, as...

Security Bulletin: A vulnerability in OpenSSL affects IBM Storage Protect Backup-Archive Client on Linux x86_64 and Microsoft Windows (CVE-2019-1547)

Summary IBM Storage Protect Backup-Archive Client on Linux x8664 and Microsoft Windows can be affected by a vulnerability in OpenSSL. The vulnerability can lead sensitive information exposure, as described by the CVE in the "Vulnerability Details" section. The vulnerability have been addressed...

aidaweb.si Cross Site Scripting vulnerability OBB-3767159

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross site scripting

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Plugin WP Mailto Links - Protect Email Addresses Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WP Mailto Links – Protect Email Addresses < 3.1.4 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

Google Play Protect Introduces Real-Time Code-Level Scanning for Android Malware

Google has announced an update to its Play Protect with support for real-time scanning at the code level to tackle novel malicious apps prior to downloading and installing them on Android devices. "Google Play Protect will now recommend a real-time app scan when installing apps that have never be...

Security Bulletin: Vulnerabilities in Expat (AKA libexpat) affect IBM Storage Protect for Virtual Environments: Data Protection for VMware (CVE-2022-23852, CVE-2022-23990)

Summary IBM Storage Protect for Virtual Environments: Data Protection for VMware can be affected by vulnerabilities in the Expat library. The vulnerabilities can lead to execution of arbitrary code, as described by the CVEs in the "Vulnerability Details" section. The vulnerabilities have been...

K000135944: Attack signature check security exposure

Security Advisory Description BIG-IP Advanced WAF, BIG-IP ASM, and NGINX App Protect systems incorrectly handle certain requests. This issue occurs when the following condition is met: BIG-IP Advanced WAF, BIG-IP ASM, and NGINX App Protect handle a crafted request with the parameter value. Impact...

The vulnerability of the Acronis Cyber Protect Home Office backup and recovery software lies in the improper handling of links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Acronis Cyber Protect Home Office backup and recovery software lies in the improper handling of links before accessing files. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient verification of the authenticity of executed requests, allowing attackers to access confidential information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient verification of the authenticity of executed requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in errors in the use of standard permissions, allowing attackers to increase their privileges.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the unencrypted storage of critical information, allowing attackers to obtain confidential data.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the unencrypted storage of critical information, allowing attackers to gain unauthorized access to the protected data.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in a flaw related to the processing of user-controlled authentication keys. This flaw allows attackers to escalate their privileges.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is associated with an error in the processing of authentication keys controlled by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, as well as the Acronis Cyber Protect 15 data protection software, stems from errors in verifying the cryptographic signature. This allows attackers to exploit this vulnerability to gain increased privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, as well as Acronis CyberProtect 15 data protection software, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to increase their...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, as well as Acronis Cyber Protect 15, stems from the use of unlimited IP addresses. This leads to an increase in the surface area for attacks, allowing attackers to gain unauthorized access to the system.

The vulnerability of backup and data recovery software on computers and servers involves Acronis Agent and Acronis CyberProtect 15 data protection software. This vulnerability is related to the use of an unlimited IP address, which increases the scope of possible attacks. Exploiting this...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient protection of operational data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is related to insufficient protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in a flaw related to the processing of user-controlled authentication keys. This flaw allows attackers to gain unauthorized access to protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is associated with an error in the processing of authentication keys controlled by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the absence of an authentication procedure, which allows attackers to increase their privileges.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...