8751 matches found
JVN#87182660: WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting
WordPress Plugin "WP Admin UI Customize" provided by gqevu6bsiz contains a stored cross-site scripting vulnerability CWE-79. Impact If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are...
macOS 14.x < 14.7.1 Multiple Vulnerabilities (121570)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.1. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An...
CVE-2024-23169
The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...
CVE-2024-23169: Improper Neutralization of Input During Web Page Generation
The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...
PT-2024-19695
Name of the Vulnerable Software and Affected Versions RSA NetWitness version 11.7.2.0 Description The issue concerns a Cross-Site Scripting XSS flaw in the web interface of RSA NetWitness. This flaw is exploited via the Where textbox on the Reports screen during the creation of new rules...
CVE-2024-23169
The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...
CVE-2024-23169
The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting XSS via the Where textbox on the Reports screen during new rule creation...
CVE-2024-23169
The RSA NetWitness Platform is vulnerable to a Cross-Site Scripting (XSS) flaw in its web interface. Specifically, the vulnerability exists in the Where textbox on the Reports screen during the process of creating a new rule. This issue affects versions prior to 12.5.0.0 , including version 11.7....
gnome-shell and gnome-shell-extensions security update
gnome-shell 40.10-21 - Only open portal login in response to user action Resolves: RHEL-39098 40.10-20 - Fix inhibit-shortcut permissions Resolves: RHEL-2031 40.10-19 - Use correct bus name for screencast service Related: RHEL-35775 gnome-shell-extensions 40.7-19 - Extend workspace buttons to...
kernel: Linux kernel: Denial of Service via use-after-free in vc_screen
A flaw was found in the Linux kernel. A local user can exploit a use-after-free UAF vulnerability in the vcscreen component. This occurs because a pointer to the vcdata structure is not reloaded after a console unlock operation, leading to the use of freed memory. Successful exploitation of this...
CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...
CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...
CVE-2024-51992
The CVE-2024-51992 issue affects Orchid Platform versions 8 through 14.42.x and stems from a method exposure vulnerability in the platform’s asynchronous modal functionality. The root cause is exposing dangerous methods within the Screen class, enabling an attacker to call arbitrary methods. Clai...
CVE-2024-51992
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...
CVE-2024-51992: Exposed Dangerous Method or Function
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...
openSUSE 15 Security Update : virtualbox (openSUSE-SU-2024:0364-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0364-1 advisory. Update to release 7.1.4: NAT: Fixed DHCP problems with certain guests when domain is empty VMSVGA: Improved flickering, black screen and other...
Mozilla Firefox Focus Full-screen Spoofing
The vulnerability of Mozilla Firefox Focus’ full-screen mode on Android operating systems is related to an improper limitation on the number of user interface layers that can be displayed. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
OPENSUSE-SU-2024:0364-1 Security update for virtualbox
This update for virtualbox fixes the following issues: Update to release 7.1.4: NAT: Fixed DHCP problems with certain guests when domain is empty VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels Linux Guest Additions: Introduce initial support for...
New Stealer Uses Invalid Cert To Compromise Systems
New Stealer Uses Invalid Cert To Compromise Systems By Mohinder Gill, Mallikarjun Wali and Sangram Mohapatro · November 07, 2024 A new Stealer has been making the rounds. Its name: Fickle. Fickle Stealer is a new Rust-based information stealer that spreads through various attack vectors, includin...
