WordPress CoolClock plugin <= 4.3.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress CoolClock plugin versions = 4.3.4. Solution Update the WordPress CoolClock plugin to the latest available version at least 4.3.5...

CoolClock < 4.3.5 - Contributor+ Stored Cross-Site Scripting

The plugin does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks As a user with a role as low as contributor, put the following shortcode in a post/page and view/preview it to trigger the XSS which is specific to...

Debian DLA-2674-1 : isc-dhcp security update

Jon Franklin and Pawel Wieczorkiewicz found an issue in the ISC DHCP client and server when parsing lease information, which could lead to denial of service via application crash. For Debian 9 stretch, this problem has been fixed in version 4.3.5-3+deb9u2. We recommend that you upgrade your...

[ASA-202010-6] powerdns-recursor: denial of service

Arch Linux Security Advisory ASA-202010-6 ========================================= Severity: High Date : 2020-10-18 CVE-ID : CVE-2020-25829 Package : powerdns-recursor Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1243 Summary ======= The package powerdns-recurs...

DEBIAN-CVE-2020-11077

In Puma RubyGem before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the firs...

NETGEAR SRX5308 SQL Injection Vulnerability

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. A SQL injection vulnerability exists in the NETGEAR SRX5308 version 4.3.5-3. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerabili...

VulnCheck KEV: CVE-2019-17049

NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account...

CVE-2018-17874

ExpressionEngine before 4.3.5 has reflected XSS...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2014:1729-1)

This libreoffice update fixes the following security and non security issues : - Version bump to 4.3.5 release : - Various small fixes - Fix for CVE-2014-9093 bnc907636 - Remove dangling symlinks from previous versions bnc884942 Note that Tenable Network Security has extracted the preceding...

LibreOffice RTF File Handling Multiple Vulnerabilities (Nov 2014) - Mac OS X

LibreOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...