WordPress Plugin Custom Twitter Feeds 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2023-13331 · WordPress · Smash Balloon Custom Twitter Feeds

Name of the Vulnerable Software and Affected Versions: Smash Balloon Custom Twitter Feeds Tweets Widget plugin versions = 1.8.4 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Twitter Feeds Tweets Widget Type Plugin Vulnerable versions = 1.8.4 Fixed in 2.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-33974 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ffeee86a1e55 Credits...

SUSE CVE-2011-4151

The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors, a different vulnerabilit...

SUSE CVE-2019-15682

RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service DoS condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5...

MV POWER CCTV DVR 安全漏洞

MV POWER CCTV DVR is a series of CCTV cameras from MV POWER. A security vulnerability exists in MV POWER CCTV DVR TV-7104HE version 1.8.4 115215B9 and TV7108HE version. An attacker can exploit this vulnerability to execute arbitrary operating system commands as the root user...

Notable 安全漏洞

Notable is a Markdown-based note-taking software with cross-platform support from the individual developers of Notable. A security vulnerability exists in Notable version 1.8.4, which stems from unfiltered text editing and allows an attacker to execute arbitrary code via a crafted payload injecte...

PT-2022-17717 · Notable · Notable

Name of the Vulnerable Software and Affected Versions: Notable version 1.8.4 Description: The issue allows attackers to execute arbitrary code via a crafted payload injected into the Title text field, due to a lack of filtering for text editing. Recommendations: For Notable version 1.8.4, conside...

PT-2022-7278 · Guzzle +2 · Guzzlehttp/Psr7 +2

Name of the Vulnerable Software and Affected Versions: guzzlehttp/psr7 versions prior to 1.8.4 and 2.1.1 Description: The issue is related to improper header parsing in the guzzlehttp/psr7 library. An attacker could sneak in a new line character and pass untrusted values in both the header names...

Cleartext Transmission of Sensitive Information

Overview std/net/smtp is a Go standard library package std/net/smtp Affected versions of this package are vulnerable to Cleartext Transmission of Sensitive Information. Go Vulnerability Report:SMTP clients using net/smtp can use the PLAIN authentication scheme on network connections not secured...

PT-2021-24284 · Tokio +2 · Tokio +2

Name of the Vulnerable Software and Affected Versions: tokio crate versions 1.8.4 and earlier tokio crate versions 1.9.x through 1.13.x before 1.13.1 Description: An issue in the tokio crate for Rust can cause a data race and memory corruption in certain circumstances involving a closed oneshot...

libsixel 缓冲区错误漏洞

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. Libsixel 1.8.4 suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data...

HD Quiz < 1.8.4 - Authenticated Stored XSS

The plugin does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues Create or edit a Quiz, and put the following payload as an Answers of a "Multiple Choice: Text" Question: " autofocus...

CVE-2021-26924

An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header...

PT-2021-17179 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 1.8.4 Description: An issue was discovered where browser XSS protection is not activated due to the missing XSS protection header. Recommendations: For versions prior to 1.8.4, update to version 1.8.4 or later to...

PT-2021-17178 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 1.8.4 Description: An issue in Argo CD allows accessing the "api/version" endpoint, which leaks internal system information. This endpoint is not protected with authentication. Recommendations: For versions prior to...

Argo Code Issues Vulnerabilities

Argo is an open source container native workflow engine. A code issue vulnerability exists in Argo CD versions prior to 1.8.4, which stems from the incorrect handling of Token in the util/session/sessionmanager.go file, resulting in the Token remaining valid after the user is unavailable. No...

CVE-2021-26921

In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled...

Notable Cross-Site Scripting Vulnerability

Notable is a Markdown-based note-taking software with cross-platform support from the individual developer of Notable. A cross-site scripting vulnerability exists in Notable version 1.8.4, where an attacker could execute a cross-site scripting attack via crafted Markdown text...

HashiCorp Consul Enterprise Denial of Service Vulnerability

HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. A security vulnerability exists in HashiCorp Consul Enterprise versions 1.7.0...