Null pointer dereference

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception...

UBUNTU-CVE-2020-12059

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception...

CVE-2020-12059: NULL Pointer Dereference

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception...

openSUSE Security Update : cni / cni-plugins / conmon / etc (openSUSE-2020-398)

This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues : podman was updated to 1.8.0 : - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator 3829 bsc1155217 -...

This Week in Security News: Over 2,000 WordPress Accounts Compromised and Facebook to Pay $550M to Settle Class Action Case Over Facial Recognition

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, over two thousand WordPress sites were compromised using a malicious script that redirects visitors to scam websites. Also, read about how...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

Design/Logic Flaw

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-19379

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data...

CVE-2019-19379

The CVE-2019-19379 entry concerns MISP version 2.4.118 where the vulnerability resides in app/Controller/TagsController.php, allowing an attacker to bypass intended restrictions on tagging data. The connected documents confirm the affected component (TagsController.php) and the impact (restrictio...

PT-2019-15828

Name of the Vulnerable Software and Affected Versions MISP version 2.4.118 Description The issue allows users to bypass intended restrictions on tagging data in the TagsController.php file, located in the app/Controller directory. Recommendations For MISP version 2.4.118, consider restricting...

WordPress searchterms-tagging-2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

WordPress searchterms-tagging-2 plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. The WordPress searchterms-tagging-2 plugin suffers...

CVE-2015-9459

The CVE-2015-9459 entry concerns the WordPress plugin searchterms-tagging-2 (through version 1.535) and describes a cross-site scripting (XSS) vulnerability exploitable via the wp-admin/options-general.php count parameter. Affected component: the searchterms-tagging-2 plugin for WordPress. Root c...

CVE-2015-9459: Improper Neutralization of Input During Web Page Generation

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter...

PT-2019-7418

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the count parameter in the wp-admin/options-general.php API endpoint. This allows for potential...

PT-2019-7417

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier for WordPress Description The issue concerns SQL injection via the count parameter in the pk stt2 db get popular terms function, which is exploitable via CSRF. This allows for potential...

CVE-2015-9458: Improper Neutralization of Special Elements used in an SQL Command

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pkstt2dbgetpopularterms count parameter exploitable via CSRF...

CVE-2008-3218

Multiple cross-site scripting XSS vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 free tagging taxonomy terms, which are not properly handled on node preview pages, and 2 unspecified OpenID values...

Google and ARM Tackle Android Bugs with Memory-Tagging

Aiming at improving the security of the Android ecosystem, Google has partnered up with mobile silicon-maker ARM to implement a hardware-based bug detection tool specifically for memory-safety vulnerabilities. Dubbed the memory-tagging extension MTE, the feature helps mitigate these kinds of bugs...