PT-2024-34249 · Unknown · Amilia Store

Name of the Vulnerable Software and Affected Versions: Amilia Store versions 2.9.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For Amilia...

WordPress Amilia Store plugin <= 2.9.8 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Amilia Store versions = 2.9.8...

WordPress Amilia Store Plugin <= 2.9.8 is vulnerable to Cross Site Scripting (XSS)

Software Amilia Store Type Plugin Vulnerable versions = 2.9.8 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50472 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c0d225726ac8 Credits SOPROBRO Required privilege Contributor...

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, relates to deficiencies in access control. This vulnerability allows a malicious actor to delete data from the KV Store (Key Value Store).

The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, is related to deficiencies in access control to the KV Store Key Value Store. Exploiting this vulnerability could...

[SECURITY] Fedora 40 Update: rust-rustls-native-certs-0.8.0-1.fc40

Rustls-native-certs allows rustls to use the platform native certificate store...

[SECURITY] Fedora 40 Update: rust-rustls-native-certs0.7-0.7.3-1.fc40

Rustls-native-certs allows rustls to use the platform native certificate store...

[SECURITY] Fedora 39 Update: rust-rustls-native-certs-0.8.0-1.fc39

Rustls-native-certs allows rustls to use the platform native certificate store...

[SECURITY] Fedora 39 Update: rust-rustls-native-certs0.7-0.7.3-1.fc39

Rustls-native-certs allows rustls to use the platform native certificate store...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source and Adobe Commerce/B2B lies in insufficient validation of input data, allowing attackers to disclose sensitive information.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to disclose sensitive information...

CVE-2024-9652

CVE-2024-9652 affects Locatoraid Store Locator for WordPress. The vulnerability is a reflected XSS via POST parameters in all versions up to 3.9.47, caused by insufficient input sanitization and output escaping. Exploitation could allow unauthenticated attackers to inject scripts into pages that ...

CVE-2024-9652 Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting

The Locatoraid Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $POST keys in all versions up to, and including, 3.9.47 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-9652 Locatoraid Store Locator <= 3.9.47 - Reflected Cross-Site Scripting

The Locatoraid Store Locator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $POST keys in all versions up to, and including, 3.9.47 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

[SECURITY] Fedora 39 Update: valkey-8.0.1-1.fc39

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 40 Update: valkey-8.0.1-1.fc40

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

The vulnerabilities of the functions tcrit1store() and tcrit2store() in the Linux operating system’s kernel hwmon driver allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions tcrit1store and tcrit2store in the driver hwmon/lm95234.c of the Linux kernel’s hardware monitoring driver is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

[SECURITY] Fedora 41 Update: valkey-8.0.1-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

WordPress Locatoraid Store Locator plugin <= 3.9.47 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Locatoraid Store Locator versions = 3.9.47...

[SECURITY] Fedora 41 Update: rust-rustls-native-certs0.7-0.7.3-1.fc41

Rustls-native-certs allows rustls to use the platform native certificate store...

WordPress plugin Locatoraid Store Locator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-39740 · WordPress · Locatoraid Store Locator

Name of the Vulnerable Software and Affected Versions: Locatoraid Store Locator plugin for WordPress versions up to, and including, 3.9.47 Description: The issue is related to Reflected Cross-Site Scripting via $ POST keys due to insufficient input sanitization and output escaping. This allows...