4706 matches found
CVE-2024-49211
CVE-2024-49211 describes a Reflected XSS in the Dashboard Listing Archer Platform UX page for Archer Platform 6.x before 2024.08 . The vulnerability allows a remote, unauthenticated attacker to lure a victim user into submitting malicious HTML/JavaScript, which is then reflected and executed in t...
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System NFSv4 services...
CVE-2024-42500
CVE-2024-42500 describes a denial-of-service vulnerability impacting HPE HP-UX System’s Network File System (NFSv4). The available connected sources identify HP-UX NFSv4 as the affected component and classify the impact as high on availability (I: LOW, A: HIGH) with no confidentiality or critical...
Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty and libcurl may affect IBM Storage Protect Backup-Archive Client
Summary IBM Storage Protect Backup-Archive Client can be affected by security flaws in IBM WebSphere Application Server Liberty and libcurl. The flaws can lead to weaker than expected security for outbound TLS connections and bypass of security restrictions, as described in the "Vulnerability...
CVE-2024-5346
The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the UX Countdown, Video Button, UX Video, UX Slider, UX Sidebar, and UX Payment Icons shortcodes in all versions up to, and including, 3.18.7 due to insufficient input sanitization and output escaping on user suppli...
Fedora 40 : composer (2024-9ed24c98cd)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ed24c98cd advisory. Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name GHSA-47f6-5gq3-vx9c / CVE-2024-35241 Security: Fixed multip...
MAL-2024-1280 Malicious code in @symplr-ux/alloy-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17b660a440d2cb884c99312341fc58bf33cac16bb05ecf3065ab4f40c073c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress UX Flat Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)
Software UX Flat Type Plugin Vulnerable versions = 4.4 Fixed in 4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2459 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1c4ff3eaa36d Credits Francesco Carlucci Required privileg...
CVE-2024-2459 UX Flat <= 4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
The UX Flat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wi...
CVE-2024-2459
CVE-2024-2459 affects the WordPress plugin UX Flat. The Red Hat and Wordfence entries confirm: all versions up to and including 4.1 are vulnerable to a Stored Cross-Site Scripting (XSS) via the plugin’s button shortcode, caused by insufficient input sanitization and output escaping of user-suppli...
PT-2024-20471 · WordPress · Ux Flat
Name of the Vulnerable Software and Affected Versions: UX Flat plugin for WordPress versions up to, and including, 4.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'button' shortcode due to insufficient input sanitization and output escaping on user-supplied...
WordPress Plugin UX Flat Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
UX Flat <= 4.8 - Contributor+ Stored XSS
Description The plugin does not validate and escape some of its 'button' shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
Metasploit Wrap-Up 03/08/2024
New module content 2 GitLab Tags RSS feed email disclosure Authors: erruquill and n00bhaxor Type: Auxiliary Pull request: 18821 contributed by n00bhaxor Path: gather/gitlabtagsrssfeedemaildisclosure AttackerKB reference: CVE-2023-5612 Description: This adds an auxiliary module that leverages an...
CVE-2023-40555 WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection
Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...
CVE-2023-40555
CVE-2023-40555 affects Flatsome theme for WordPress (<= 3.17.5). The vulnerability is a Deserialization of Untrusted Data issue leading to unauthenticated PHP Object Injection via deserialization of untrusted input in the Flatsome codebase. CVSS v3.1 metrics from NVD indicate a CRITICAL impact...
CVE-2023-50271
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...
Design/Logic Flaw
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...