CVE-2022-0211

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211

The CVE-2022-0211 entry concerns the WordPress Shield Security plugin (before 13.0.6). The vulnerability is a stored XSS caused by the plugin not sanitising/escaping admin notes, which could let high-privilege users execute JavaScript even when unfiltered_html is disallowed. Public references in ...

CVE-2022-0211 Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2022-0211: Improper Neutralization of Input During Web Page Generation

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. PoC Put the following payload as an Admin Note Shield Security Tools Admin Notes:...

Shield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed. Put the following payload as an Admin Note Shield Security Tools Admin Notes: alert/XSS/;...

WordPress Shield Security plugin <= 13.0.5 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Yoru Oni in WordPress Shield Security plugin versions = 13.0.5. Solution Update the WordPress Shield Security plugin to the latest available version at least 13.0.6...

NVIDIA SHIELD Experience Buffer Overflow Vulnerability

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a buffer overflow vulnerability that originates from a boundary error in NVIDIA NVDEC in the NVIDIA Tegra kernel driver. An attacker could exploit the vulnerability to trigger memory...

NVIDIA SHIELD Experience Resource Management Error Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a resource management error vulnerability that exists as a result of a use-after-free error in nvmap ioctl. An attacker could exploit this vulnerability to execute arbitrary code...

NVIDIA SHIELD Experience Code Issue Vulnerability

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. A code issue vulnerability exists in NVIDIA SHIELD Experience, which exists due to a NULL pointer dereference error in TrustZone. An attacker could exploit this vulnerability to conduct a denial of service DoS attack...

NVIDIA SHIELD Experience Access Control Error Vulnerability

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from an Access Control Error vulnerability that stems from improperly restricting access. An attacker could exploit this vulnerability to cause a denial of service...

Security Bulletin: NVIDIA SHIELD TV - January 2022

NVIDIA has released a software security update for NVIDIA SHIELD® TV. This update addresses issues that may lead to information disclosure, denial of service, code execution, or escalation of privileges. To protect your system, download and install this software update through Settings About Syst...

NVIDIA Shield TV 资源管理错误漏洞

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a resource management error vulnerability that exists as a result of a use-after-free error in nvmap ioctl. An attacker could exploit this vulnerability to execute arbitrary code...

NVIDIA SHIELD TV 权限许可和访问控制问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. The NVIDIA SHIELD TV suffers from a privilege license and access control issue vulnerability that stems from a failure to restrict AHB-DMA access in the BROM, distributed with the Android image of the NVIDIA-supplied T21...

NVIDIA SHIELD TV 代码问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. A code issue vulnerability exists in NVIDIA SHIELD TV that stems from a NULL pointer dereference error in NVHost. A malicious application can trigger a race condition and reboot the system, resulting in a DoS...

NVIDIA Shield TV 代码问题漏洞

NVIDIA Shield Experience is a streaming media player from Nvidia, USA. A code issue vulnerability exists in NVIDIA SHIELD Experience, which exists due to a NULL pointer dereference error in TrustZone. An attacker could exploit this vulnerability to conduct a denial of service DoS attack...

Nvidia NVIDIA Shield TV 访问控制错误漏洞

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from an Access Control Error vulnerability that stems from improperly restricting access. An attacker could exploit this vulnerability to cause a denial of service...

Nvidia NVIDIA Shield TV 缓冲区错误漏洞

NVIDIA SHIELD Experience is a streaming media player from Nvidia, USA. NVIDIA SHIELD Experience suffers from a buffer overflow vulnerability that originates from a boundary error in NVIDIA NVDEC in the NVIDIA Tegra kernel driver. An attacker could exploit the vulnerability to trigger memory...

Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer)

Overview Trend Micro Incorporated has released security updates for Trend Micro Security 2021 family Consumer. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Maximum Security 2021 A user who can log in to the system where...