4814 matches found
OESA-2022-1601 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.CVE-2021-3522...
impressionsstudio.com Cross Site Scripting vulnerability OBB-2439520
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
A flaw was found in expat. Passing one or more namespace separator characters in the "xmlns:prefix" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML...
expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
A flaw was found in expat. Passing one or more namespace separator characters in the "xmlns:prefix" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML...
immocasapiu.com Cross Site Scripting vulnerability OBB-2418949
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
chantdemonpays.qc.ca Cross Site Scripting vulnerability OBB-2418740
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
3 Reasons to Join Rapid7’s Cloud Security Summit
The world of the cloud never stops moving — so neither can cloud security. In the face of rapidly evolving technology and a constantly changing threat landscape, keeping up with all the latest developments, trends, and best practices in this emerging practice is more vital than ever. Enter Rapid7...
nfe.domcavati.mg.gov.br Cross Site Scripting vulnerability OBB-2418341
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bizzin.nl Cross Site Scripting vulnerability OBB-2415277
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Static Code Injection
Description The Microweber application allows HTML tags in the "First name", "Last name" and "Phone number" which can be exploited by Injecting HTML payloads. Proof of Concept 1.While buying product we need to fill contact information form. 2.Insert your html code in code block. e.g., Hurry Up!Go...
Cross site scripting
VMware Workspace ONE Boxer contains a stored cross-site scripting XSS vulnerability. Due to insufficient sanitization and validation, in VMware Workspace ONE Boxer calendar event descriptions, a malicious actor can inject script tags to execute arbitrary script within a user's window...
Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2022-67480)
Ice Hrm is a human resource management system, and a cross-site scripting vulnerability exists in Ice Hrm version 30.0.0.OS. The vulnerability stems from the inability of the IceHRM website to effectively filter html tags in user input, which could be exploited by a logged-in attacker to steal...
haunt-entertainment.com Cross Site Scripting vulnerability OBB-2387716
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin to the latest available...
WordPress Expire tags plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Expire tags plugin versions = 1.1. Solution No patched version available...
WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin <= 1.1.7 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin versions = 1.1.7. Solution Update the WordPress WP Required Taxonomies – Categories and Tags Mandatory plugin to the latest available version at least 1.1.8...
WordPress Add Pinterest conversion tags for Pinterest Ads + Site verification plugin <= 1.2.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Add Pinterest conversion tags for Pinterest Ads + Site verification plugin versions = 1.2.2. Solution Update the WordPress Add Pinterest conversion tags for Pinterest Ads + Site verification plugin to...
WordPress Add Linkedin insight tags for Linkedin ads plugin <= 1.2.3 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Add Linkedin insight tags for Linkedin ads plugin versions = 1.2.3. Solution Update the WordPress Add Linkedin insight tags for Linkedin ads plugin to the latest available version at least 1.2.4...
WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugi...
WordPress Expire tags plugin <= 1.1 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Expire tags plugin versions = 1.1. Solution No patched version available...