359 matches found
simon-service.com Improper Access Control vulnerability OBB-3812050
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
A Bootiful Podcast: Azul Deputy CTO Simon Ritter
Hi, Spring fans! In this week's installment I talk to Azul Deputy CTO Simon Ritter @speakjava, recorded live at Devoxx Belgium 2023!...
architekten-simon-simon.de Improper Access Control vulnerability OBB-3765967
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30497
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Simon Chuang WP LINE Notify plugin = 1.4.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Simon Chuang WP LINE Notify plugin = 1.4.4 versions...
CVE-2023-30497 WordPress LINE Notify Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Simon Chuang WP LINE Notify plugin = 1.4.4 versions...
CVE-2023-30497
CVE-2023-30497 affects the WordPress WP LINE Notify plugin by Simon Chuang (≤ 1.4.4). The vulnerability is an unauthenticated Reflected XSS via the uid parameter, allowing an attacker to trigger script execution in the context of an admin user. Public disclosures confirm the vulnerability exists ...
cypress-image-snapshot path traversal vulnerability
cypress-image-snapshot is an image snapshot plugin from the individual developer Simon Smith. A path traversal vulnerability exists in cypress-image-snapshot, which stems from a vulnerability that could allow a user to pass a relative file path as a snapshot name and access machines outside of th...
simon-tom.com Cross Site Scripting vulnerability OBB-3335262
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-19515 · Unknown · Simon Tatham'S Portable Puzzle Collection
Name of the Vulnerable Software and Affected Versions: Simon Tatham's Portable Puzzle Collection affected versions not specified Description: A crafted save file can cause a buffer overrun in the software. This issue can potentially be exploited, but no specific details about the estimated number...
CVE-2023-24291
A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...
UBUNTU-CVE-2023-24291
A crafted save file can cause a buffer overrun in Simon Tathams Portable Puzzle Collection...
Fedora 36 : clamav (2023-3ba365d538)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3ba365d538 advisory. - Fix daily.cvd file - Split out documentation into separate -doc sub-package - 2128276 Please port your pcre dependency to pcre2 - Explicit...
WordPress core <= 6.0.2 - Cross-Site Request Forgery (CSRF) vulnerability in wp-trackback.php
Cross-Site Request Forgery CSRF vulnerability in wp-trackback.php discovered by Simon Scannell in WordPress core versions = 6.0.2. Solution Update the WordPress to the latest available version at least 6.0.3...
CVE-2022-36373
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...
Cross site request forgery (csrf)
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...
CVE-2022-36373 WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Multiple Cross-Site Request Forgery CSRF vulnerabilities in Simon Ward MP3 jPlayer plugin = 2.7.3 at WordPress...
CVE-2022-36373
CVE-2022-36373 concerns the WordPress MP3 jPlayer plugin (versions <= 2.7.3). The NVD entry reports multiple CSRF vulnerabilities with a base CVSS v3.1 score of 8.8 (HIGH) and an attack vector of NETWORK, requiring user interaction and no privileges. Connected sources consistently describe CSR...
PT-2022-23334
Name of the Vulnerable Software and Affected Versions: Simon Ward MP3 jPlayer plugin versions = 2.7.3 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...
CISA Issues Warning on Active Exploitation of UnRAR Software for Linux Systems
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a recently disclosed security flaw in the UnRAR utility to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. Tracked as CVE-2022-30333 CVSS score: 7.5, the issue concerns a path...