CVE-2022-0147

The CVE describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin “Cookie Information / Free GDPR Consent Solution” prior to version 2.0.8. The issue arises because user data is not escaped before being output in admin-dashboard attributes, enabling script injection in the ...

Aternity SteelCentral AppInternals Remote Code Execution Vulnerability

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A remote code execution vulnerability exists in Aternity SteelCentral AppInternals, which stems from a failure of a network system or product to properly filter specific elements of external input da...

Aternity SteelCentral AppInternals Directory Traversal Vulnerability (CNVD-2022-22671)

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A directory traversal vulnerability exists in Aternity SteelCentral AppInternals, which stems from /api/appInternals/1.0/agent/da/pcf that does not perform any validation of user input that allows...

CVE-2022-0147: Improper Neutralization of Input During Web Page Generation

The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

Aternity SteelCentral AppInternals跨站脚本漏洞

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A cross-site scripting vulnerability exists in Aternity SteelCentral AppInternals, which can be exploited by remote attackers to inject malicious script or HTML code...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress Cookie Information | Free GDPR Consent Solution plugin prior to version 2.0.8 is vulnerable to A cross-site scripting vulnerability...

PT-2022-12995

Name of the Vulnerable Software and Affected Versions The Cookie Information | Free GDPR Consent Solution WordPress plugin versions prior to 2.0.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the plugin does not properly escape user data before...

Aternity SteelCentral AppInternals Directory Traversal Vulnerability (CNVD-2022-22670)

Aternity SteelCentral AppInternals is a monitoring modern automation solution from Aternity, Inc. A directory traversal vulnerability exists in Aternity SteelCentral AppInternals, which stems from the fact that /api/appInternals/1.0/plugin/pmx does not perform any validation of user input that...

Mageia: Security Advisory (MGASA-2022-0098)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

temoignages.re Improper Access Control vulnerability OBB-2424763

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Arbitrary file write in nats-server

This document is canonically: Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. JetStream is the optional RAFT-based resilient persistent feature of NATS. Problem Description The JetStream...

GHSA-6H3M-36W8-HV68 Arbitrary file write in nats-server

This document is canonically: Background NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. JetStream is the optional RAFT-based resilient persistent feature of NATS. Problem Description The JetStream...

SUSE: Security Advisory (SUSE-SU-2022:0719-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress WooCommerce Product Attachment plugin <= 2.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Product Attachment plugin versions = 2.1.2. Solution Update the WordPress WooCommerce Product Attachment plugin to the latest available version at least 2.1.3...

WordPress BNG Gateway For WooCommerce plugin <= 1.6.10 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BNG Gateway For WooCommerce plugin versions = 1.6.10. Solution No patched version available...

WordPress Expire tags plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Expire tags plugin versions = 1.1. Solution No patched version available...

WordPress Freemage plugin <= 1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Freemage plugin versions = 1.0. Solution No patched version available...

WordPress DeMomentSomTres Categories plugin <= 201704251008 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress DeMomentSomTres Categories plugin versions = 201704251008. Solution No patched version available...

WordPress BuddyForms EasyPin plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress BuddyForms EasyPin plugin versions = 1.0.1. Solution No patched version available...

WordPress WP Author Bio plugin <= 1.5.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Author Bio plugin versions = 1.5.5. Solution No patched version available...