CVE-2024-29734

CVE-2024-29734 (SonicDICOM Media Viewer) involves an uncontrolled DLL search path element in SonicDICOM Media Viewer 2.3.2 and earlier. The root cause is a DLL search path issue (CWE-427) that may lead to insecure loading of Dynamic Link Libraries, allowing arbitrary code to execute with the priv...

[SECURITY] Fedora 40 Update: biosig4c++-2.6.0-3.fc40

BioSig is a software library for processing of biomedical signals EEG, ECG, etc. with Matlab, Octave, C/C++ and Python. A standalone signal viewer supporting more than 30 different data formats is also provided...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-25080

The CVE-2024-25080 entry affects Axigen’s WebMail component. Vulnerable: Axigen 10.x WebMail before 10.3.3.62. Root cause: a cross-site scripting (XSS) flaw exposed via the image attachment viewer, enabling injected script execution within a user’s browser session. Impact details in the connected...

PT-2024-20732 · Axigen · Axigen

Name of the Vulnerable Software and Affected Versions: Axigen versions 10.0 through 10.3.3.61 Description: The issue allows for cross-site scripting XSS via the image attachment viewer in WebMail. This could potentially affect a significant number of devices worldwide, although the exact number i...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-30559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

CVE-2024-30524

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

CVE-2024-30524

CVE-2024-30524 : Stored XSS in RedLettuce PDF Viewer for Elementor caused by improper input neutralization during web page generation. Affected: PDF Viewer for Elementor versions up to 2.9.3 (vendor listing notes “from n/a through 2.9.3”). CVSS v3.1 base score 5.4 (medium); impact limited to conf...

CVE-2024-30524 WordPress PDF Viewer for Elementor plugin <= 2.9.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedLettuce Plugins PDF Viewer for Elementor allows Stored XSS.This issue affects PDF Viewer for Elementor: from n/a through 2.9.3...

CVE-2024-30559 WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

CVE-2024-30559 WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maurice Spin 360 deg and 3D Model Viewer allows Stored XSS.This issue affects Spin 360 deg and 3D Model Viewer: from n/a through 1.2.7...

CVE-2024-30559

CVE-2024-30559 is a cross-site scripting (Stored XSS) vulnerability reported in the Spin 360 deg and 3D Model Viewer WordPress plugin. The CVE entry notes the flaw affects Spin 360 deg and 3D Model Viewer versions from an unspecified baseline up to 1.2.7. The linked Red Hat entry reiterates the i...

MAL-2024-1171 Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

WordPress Plugin PDF Viewer for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plugin. WordPress Plugin PDF Viewer for...

PT-2024-23452 · Unknown · Redlettuce Plugins Pdf Viewer For Elementor

Name of the Vulnerable Software and Affected Versions: RedLettuce Plugins PDF Viewer for Elementor versions through 2.9.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potenti...

WordPress Spin 360 deg and 3D Model Viewer plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Spin 360 deg and 3D Model Viewer versions = 1.2.7...

Keyence KV STUDIO和Keyence KV REPLAY VIEWER 安全漏洞

Keyence KV STUDIO and Keyence KV REPLAY VIEWER are both products of Keyence Corporation of China.Keyence KV STUDIO is a PLC programming software.Keyence KV REPLAY VIEWER is a computer program. A security vulnerability exists in Keyence KV STUDIO version 11.64 and earlier, and Keyence KV REPLAY...