WordPress DSGVO Youtube Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)

Software DSGVO Youtube Type Plugin Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32596 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4169091c7562 Credits LVT-tholv2k Required privilege Contribut...

OESA-2024-1321 python-aiosmtpd security update

This is a server for SMTP and related protocols, similar in utility to the standard library's smtpd.py module, but rewritten to be based on asyncio for Python 3. Security Fixes: aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP...

SUSE CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

DEBIAN-CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

PYSEC-2024-221

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

UBUNTU-CVE-2024-27305

aiosmtpd is a reimplementation of the Python stdlib smtpd.py based on asyncio. aiosmtpd is vulnerable to inbound SMTP smuggling. SMTP smuggling is a novel vulnerability based on not so novel interpretation differences of the SMTP protocol. By exploiting SMTP smuggling, an attacker may send...

CVE-2024-27305

CVE-2024-27305 concerns the Python SMTP server reimplementation aiosmtpd and its vulnerability to inbound SMTP smuggling. The issue allows an attacker to craft spoofed sender addresses and conduct targeted phishing under certain SMTP server conditions. Technical details describe the vulnerability...

PT-2024-21808

Name of the Vulnerable Software and Affected Versions aiosmtpd versions prior to 1.4.5 Description aiosmtpd is vulnerable to inbound SMTP smuggling, a novel vulnerability based on interpretation differences of the SMTP protocol. By exploiting this issue, an attacker may send spoofed e-mails with...

WordPress Envo's Elementor Templates & Widgets for WooCommerce Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Envo's Elementor Templates & Widgets for WooCommerce Type Plugin Vulnerable versions = 1.4.4 Fixed in 1.4.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-0768 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID...

PT-2024-15128

Name of the Vulnerable Software and Affected Versions Better Search Replace plugin for WordPress versions up to, and including, 1.4.4 Description The issue is related to PHP Object Injection via deserialization of untrusted input, allowing unauthenticated attackers to inject a PHP Object. If a PO...

WordPress plugin Form Vibes security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Matroska libebml Security Vulnerability

Matroska libebml is a GlobalMatroska open source application providing low-level C++ libraries for reading and writing Matroska files. A security vulnerability exists in Matroska libebml versions prior to 1.4.5, which stems from an integer overflow that may occur when reading or writing, which ma...

PT-2024-2547 · Libebml +3 · Libebml +3

Name of the Vulnerable Software and Affected Versions: libebml versions prior to 1.4.5 Description: The issue is related to an integer overflow in the MemIOCallback.cpp file of the libebml library. This overflow can occur during reading or writing operations and may result in buffer overflows. Th...

PT-2023-25502 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: Prestashop opartlimitquantity versions 1.4.5 and earlier Description: The issue concerns sensitive SQL calls in the OpartlimitquantityAlertlimitModuleFrontController::displayAjaxPushAlertMessage function that can be executed with a trivial HT...

Prestashop opartlimitquantity Security Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in Prestashop opartlimitquantity prior to version 1.4.5, which stems from...

CVE-2023-37785

A cross-site scripting XSS vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the smilecode parameter of the component /editprofile.php...

ImpressCMS 跨站脚本漏洞

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS v1.4.5 and earlier versions, which stems from the lack of effective filtering and escaping of...

CVE-2023-25706

Cross-Site Request Forgery CSRF vulnerability in Pagup WordPress Robots.Txt optimization plugin = 1.4.5 versions...

PT-2023-20259 · WordPress · Pagup Wordpress Robots.Txt Optimization Plugin

Name of the Vulnerable Software and Affected Versions: Pagup WordPress Robots.Txt optimization plugin versions 1.4.5 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...