70 matches found
CVE-2023-28621
CVE-2023-28621 is an XSS (Reflected) vulnerability in WordPress themes Raise Mag (<= 1.0.7) and Wishful Blog (
WordPress Plugin raise-mag Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress Raise Mag Theme <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)
Software Raise Mag Type Theme Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28621 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ef6477e9116b Credits László Radnai Required...
CVE-2021-42079
An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests. POC Step 1: Prepare the SSRF with a request like this: GET...
UBUNTU-CVE-2023-31919
Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the jcontextraiseexception at jerry-core/jcontext/jcontext.c...
PT-2023-23519 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: An Assertion Failure was discovered in Jerryscript via the jcontext raise exception at jerry-core/jcontext/jcontext.c. Recommendations: For Jerryscript version 3.0 commit 05dbbd1, consider...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript jcontextraiseexception function, which can be exploited by an attacker to cause a denial of service...
Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
GHSA-4R2F-6FM9-2QGH Duplicate Advisory: Ecto lacks a protection mechanism
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
CVE-2017-20166
CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...
CVE-2017-20166
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...
How to Surrender to a Drone
The Ukrainian army has released an instructional video explaining how Russian soldiers should surrender to a drone: "Seeing the drone in the field of view, make eye contact with it," the video instructs. Soldiers should then raise their arms and signal theyre ready to follow. After that the drone...
SUSE-SU-2022:1933-1 Security update for hdf5, suse-hpc
This update for hdf5, suse-hpc fixes the following issues: Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. - CVE-2020-10810: Fixed NULL pointer dereference in the function H5ACunpinentry located in H5AC....
SUSE: Security Advisory (SUSE-SU-2022:1912-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-8026 · Ecto · Ecto
Name of the Vulnerable Software and Affected Versions: Ecto version 2.2.0 Description: The issue is related to a lack of protection mechanism in the interaction between is nil and raise functions. Specifically, Ecto will not raise on queries with non-explicit nil comparisons, unless they are...
WordPress Raise Prices with Sales for WooCommerce plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Raise Prices with Sales for WooCommerce plugin versions = 1.3.0. Solution Update the WordPress Raise Prices with Sales for WooCommerce plugin to the latest available version at least 1.3.1...
The vulnerability of the __GI_raise function (sig=sig@entry=6) in the qli utility from the firebird2.5-classic-common package allows a attacker to cause a service failure.
Vulnerability of the GIraise function sig=sig@entry=6 ../nptl/sysdeps/unix/sysv/linux/raise.c:64 is related to errors during pointer assignment for zero pointers 0x00007ffff6515875. Exploitation of this vulnerability may allow an attacker to cause a service failure through a specially crafted...