CVE-2022-2443 FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting

The FreeMind WP Browser plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.2. This is due to missing nonce protection on the FreemindOptions function found in the /freemind-wp-browser.php file. This makes it possible for unauthenticated attackers t...

Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file org.jenkinsci.plugins.elasticsearchquery.ElasticsearchQueryBuilder.xml on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

PT-2022-22344 · Jenkins · Jenkins Recipe Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Recipe Plugin version 1.2 and earlier Description: A cross-site request forgery issue allows attackers to send an HTTP request to a specified URL and parse the response as XML. Recommendations: For Jenkins Recipe Plugin version 1.2 an...

Jenkins Plugin Recipe 代码问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application software. jenkins Recipe Plugin version 1...

WordPress plugin Sticky Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Sticky Popup plugin 1.2 and earlier versions have a cross-site scripting vulnerability, whi...

PT-2022-14084 · WordPress · Sticky Popup

Name of the Vulnerable Software and Affected Versions: Sticky Popup plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Stored Cross-Site Scripting via the popup title parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2022-31287

An issue was discovered in Bento4 v1.2. There is an allocation size request error in /Ap4RtpAtom.cpp...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.2, which stems from an out-of-memory allocator in Source/C++/Core/Ap4Array.h. The vulnerability is caused by the use of an out-of-memory allocator in Source/C++/Core/Ap4Arra...

CVE-2022-30877

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...

PYSEC-2022-43056

The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2...

Halibut Denial of Service Vulnerability

Halibut is a secure, RPC-based open source communication framework. Halibut version 1.2 contains a denial-of-service vulnerability that stems from a mix-up in the cleanupindex directive in index.c, which is responsible for freeing memory. An attacker could exploit this vulnerability to cause a...

DEBIAN-CVE-2021-42614

A use after free in infowidthinternal in bkinfo.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted text document...

UBUNTU-CVE-2021-42613

A double free in cleanupindex in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified impact via a crafted text document...

Halibut 资源管理错误漏洞

Halibut is a secure, RPC-based open source communication framework from the individual developers of Octopus Deploy. A security vulnerability exists in Halibut version 1.2, which stems from a post-release reuse issue in infowidthinternal in bkinfo.c. The vulnerability is caused by an unspecified...

Online Birth Certificate System 跨站脚本漏洞

Online Birth Certificate System is an online birth certificate system by the individual developer ANUJ KUMAR. A security vulnerability exists in Online Birth Certificate System version v1.2, which stems from multiple cross-site scripting XSS issues in the component /obcs/user/profile.php. An...

CVE-2022-28588

In SpringBootMovie =1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS...

SpringBootMovie 代码问题漏洞

SpringBootMovie is a Spring Boot based movie website. A security vulnerability exists in SpringBootMovie version 1.2 and earlier versions, which stems from an unfiltered upload file suffix parameter, resulting in an arbitrary file upload vulnerability...

CVE-2022-21946

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...

CVE-2021-46704

In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument lib/ui/api.ts and lib/ping.ts. The vulnerability arises from insufficient input validation combined with a missing authorization check...

WordPress Education Addon for Elementor plugin <= 1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Education Addon for Elementor plugin versions = 1.1. Solution Update the WordPress Education Addon for Elementor plugin to the latest available version at least 1.2...