CVE-2022-20001

fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the default configuration of fish, changing...

PT-2022-16845 · Sylius · Sylius

Name of the Vulnerable Software and Affected Versions: Sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 Description: The issue allows any other user to view the data if the browser tab remains open after logging out. This can lead to a data leak, such as customer details or payment gateway...

CVE-2022-25601

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

CVE-2022-25601

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

CVE-2022-25601 WordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

WordPress plugin Contact Form X跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in WordPress Contact Form X plugin version 2.4 and earlier. The vulnerability stems from a la...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting attacks. The library does not properly validate the Key field in the Navigation & Properties tab, allowing an attacker to inject and execute malicious javascript...

CVE-2022-0429

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...

CVE-2022-0429

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability...

PT-2022-13178

Name of the Vulnerable Software and Affected Versions: WP Cerber Security, Anti-spam & Malware Scan WordPress plugin versions prior to 8.9.6 Description: The issue is related to an unauthenticated stored Cross-Site Scripting problem. It occurs because the $url variable is not properly sanitized...

WordPress plugin WP Cerber Security, Anti-spam & Malware Scan 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WP Cerber Security, Anti-spam & Malware Scan Plugin...

WordPress EDD Tab Manager plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress EDD Tab Manager plugin versions = 1.3.0. Solution Update the WordPress EDD Tab Manager plugin to the latest available version at least 1.3.1...

WordPress EDD Tab Manager plugin <= 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress EDD Tab Manager plugin versions = 1.3.0. Solution Update the WordPress EDD Tab Manager plugin to the latest available version at least 1.3.1...

The vulnerability of the Tab Groups component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Tab Groups component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0042-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0042-1 advisory. - Use after free in File Manager. CVE-2022-0603 - Heap buffer overflow in Tab Groups. CVE-2022-0604 - Use after free in Webstore API...

Heap Buffer Overflow

Google Chrome is vulnerable to heap buffer overflow. The vulnerability exist in Tab Groups...

Chromium: CVE-2022-0604 Heap buffer overflow in Tab Groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the Thumbnail Tab Strip component of the Google Chrome browser, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Thumbnail Tab Strip component in Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

KLA12464 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in File Manager can be exploit...

Google Chrome Tab Groups Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome Tab Groups, which can be exploited by an attacker to cause a buffer overflow, execute arbitrary code, or cause a denial of service condition on a system...