WordPress plugin Support SVG 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Hewlett Packard Enterprise Insight Remote Support 安全漏洞

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

CVE-2024-53673: Deserialization of Untrusted Data

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code...

Hewlett Packard Enterprise Insight Remote Support 安全漏洞

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

Hewlett Packard Enterprise Insight Remote Support 安全漏洞

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products, whic...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products, whic...

PT-2024-35804 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Remote Insight Support affected versions not specified Description: A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code. The issue is related to the deserialization of...

Hewlett Packard Enterprise Insight Remote Support 安全漏洞

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A spoofing vulnerability exists in several Mozilla products. An attacker...

PT-2024-17143 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support affected versions not specified Description: An XML external entity injection XXE issue may allow remote users to disclose information in certain cases. This issue is related to XML external entity processing and ca...

CVE-2024-53675: XML Injection (aka Blind XPath Injection)

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-11622: XML Injection (aka Blind XPath Injection)

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

CVE-2024-11091: Improper Neutralization of Input During Web Page Generation

The Support SVG – Upload svg files in wordpress without hassle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for...

Hewlett Packard Enterprise Insight Remote Support 安全漏洞

Hewlett Packard Enterprise Insight Remote Support HPE Insight RS is a software solution from Hewlett Packard Enterprise USA that enables passive and active remote support to improve the availability of supported remote support. A security vulnerability exists in Hewlett Packard Enterprise Insight...

RHEL 8 : edk2 (RHSA-2024:10268)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10268 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU...

PT-2024-35805 · Hewlett Packard · Hpe Insight Remote Support

Name of the Vulnerable Software and Affected Versions: HPE Insight Remote Support affected versions not specified Description: A vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases due to an XML external entity injection XXE issue. This coul...

CVE-2024-53674: XML Injection (aka Blind XPath Injection)

An XML external entity injection XXE vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases...

WordPress Support SVG <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Support SVG versions = 1.1.0...

RHEL 9 : edk2 (RHSA-2024:9956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9956 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU a...