142 matches found
de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2023-31418 via org.elasticsearch:elasticsearch (0.19.11)
org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2023-31418 Source...
PT-2024-24096 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 5.0-rc-1 through 14.10.19 XWiki Platform versions 15.5.3 and earlier XWiki Platform versions prior to 15.9-rc-1 Description: The issue allows any user with edit rights on any page to execute code on the server by addin...
CVE-2023-40599
Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...
CVE-2023-40599: Inefficient Regular Expression Complexity
Regular expression Denial-of-Service ReDoS exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js,...
CVE-2023-2168
The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inje...
CVE-2023-2168 TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting
The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inje...
CVE-2023-2168
CVE-2023-2168 – TaxoPress (WordPress plugin) is a stored cross-site scripting vulnerability in the Suggest Terms Title field, affecting TaxoPress versions up to 3.6.4. The issue arises from insufficient input sanitization and output escaping, enabling an authenticated attacker with Editor+ privil...
CVE-2023-2168: Improper Neutralization of Input During Web Page Generation
The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inje...
Malicious Package
Overview web-suggest is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
SUSE CVE-2016-1927
The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach...
MAL-2023-600 Malicious code in mini-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-961 Malicious code in web-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e4f63375b8c1f6493ccb2333bd63d9e3ca782efe9bf35b6d5c336a92993b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mini-suggest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
XVIDEOS: Self-XSS on Suggest Tag dialog box
Summary: Stored cross-site scripting arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. vulnerable URL : https://www.xvideos.com/video57921571/friendb.ifd. Vulnerability Description : Application have a add ta...
PT-2022-36686 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdpat check, AffixMgr::compound check, and SuggestMgr::checkword...
hunspell:affdicfuzzer: Heap-buffer-overflow in AffixMgr::compound_check
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5529191948353536 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasani386hunspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
PT-2022-37274 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the SfxEntry::add, AffixMgr::expand rootword, and SuggestMgr::ngsuggest functions. N...
hunspell:affdicfuzzer: Heap-buffer-overflow in SuggestMgr::badcharkey_utf
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4637636781801472 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
PT-2022-3326
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0 Description The issue is related to an out-of-bounds read in the suggest trie walk function of the Vim text editor. This can allow an attacker to impact the confidentiality, integrity, and availability of protected...