WordPress Bazaar Lite Theme <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)

Software Bazaar Lite Type Theme Vulnerable versions = 1.8.5 Fixed in 1.8.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2813 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d9553f419d38 Credits Random Robbie Required...

CVE-2023-30754 WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin = 1.8.5 versions...

PT-2023-22957 · Unknown · Adfoxly – Ad Manager

Name of the Vulnerable Software and Affected Versions: AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin versions = 1.8.5 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website,...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2023-38670 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

WordPress Location Picker at Checkout for WooCommerce Plugin <= 1.8.4 is vulnerable to Cross Site Scripting (XSS)

Software Location Picker at Checkout for WooCommerce Type Plugin Vulnerable versions = 1.8.4 Fixed in 1.8.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7de6405ab3a6 Credits Rafi...

CVE-2022-47155

Cross-Site Request Forgery CSRF vulnerability in Supsystic Slider by Supsystic plugin = 1.8.5 versions...

WordPress Plugin Supsystic 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-15199 · Supsystic · Supsystic Slider

Name of the Vulnerable Software and Affected Versions: Supsystic Slider by Supsystic plugin versions = 1.8.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

SUSE CVE-2019-15682

RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service DoS condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5...

SUSE CVE-2021-21261

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...

WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Slider by Supsystic Type Plugin Vulnerable versions = 1.8.5 Fixed in 1.8.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47155 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7a6ba385ca1f Credits rezaduty Requir...

WordPress plugin Youtube shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-38541

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...

Sql injection

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...

Archery SQL注入漏洞

Archery is a set of open source vulnerability assessment and management tools. Archery v1.4.0 version to v1.8.5 version has a SQL injection vulnerability, the vulnerability stems from the ThreadIDs parameter in the killsession interface contains SQL injection vulnerability...

Archery SQL注入漏洞

Archery is a set of open source vulnerability assessment and management tools. A security vulnerability exists in Archery versions v1.7.0 through v1.8.5, which stems from the checksum parameter in the report module containing a SQL injection vulnerability...

Archery SQL注入漏洞

Archery is an open source vulnerability assessment and management tool. A security vulnerability exists in Archery versions v1.7.5 through v1.8.5, which stems from the where parameter in /archive/apply containing a SQL injection vulnerability...

libgcrypt security update

1.8.5-7 - Fix CVE-2021-33560 2018525...

Ripple rippled 缓冲区错误漏洞

Ripple rippled is a decentralized cryptocurrency blockchain daemon that implements XRP Ledger in C++ from Ripple, USA. Ripple rippled 1.8.5 previously contained a security vulnerability that allowed an attacker to cause a crash or remotely execute commands on ripple nodes, which could lead to a D...

libgcrypt security update

1.8.5-6fips - Add API to provide hash calculation in RSA/DSA/ECDSA signature operations Orabug: 33081130 - Change Epoch from 1 to 10 1.8.5-6 - Fix for CVE-2021-33560 1971421 - Enable HW optimizations in FIPS 1976137 - Performance enchancements for ChaCha20 and Poly1305 1855231 1.8.5-5 - Performan...