WordPress Plugin All-in-one Floating Contact Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Seed Webs Seed Fonts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

IBM Maximo Asset Management 安全漏洞

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...

xiaozhuai imageinfo 安全漏洞

imageinfo is a cross-platform, ultra-fast, single-ended C++ library from the individual developers at xiaozhuai. A security vulnerability exists in xiaozhuai imageinfo version 3.0.3 and earlier. An attacker could exploit this vulnerability to cause a buffer overflow...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

SUSE CVE-2012-2978

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and child process crash via a crafted DNS packet...

SUSE CVE-2014-6511

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D...

SUSE CVE-2021-45116

An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a...

PT-2023-18777 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.1.13 Splunk Enterprise versions prior to 8.2.10 Splunk Enterprise versions prior to 9.0.4 Description: The issue allows a search to bypass safeguards for risky commands using the pivot search processing...

Symantec Identity Manager 跨站脚本漏洞

Symantec Identity Manager is an identity management system from Symantec Corporation. A security vulnerability exists in Symantec Identity Manager versions 14.3 CP3, 14.4.1, and 14.4.2, which can be exploited by an attacker to enumerate the current user's Oracle LDAP attributes by modifying the...

CVE-2023-0447

The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clearallcache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear t...

GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab is a product of the U.S. and other are U.S. GitLab.GitLab is an open source, end-to-end software development platform.Git is a free, open source, distributed version control system.Prometheus and other are products.Prometheus is an open source software program written in the Go language fo...

golang-nanoauth 授权问题漏洞

golang-nanoauth is a simple authentication layer of DigitalOcean open source . Provides a unified approach to secure services HTTP/S . A security vulnerability exists in versions golang-nanoauth v0.0.0-20160722212129-ac0cc4484ad4 through v0.0.0-20200131131040-063a3fb69896. An attacker can bypass...

Nuxt.js 跨站脚本漏洞

Nuxt.js is an open source web application framework based on Vue.js, Node.js, Webpack and Babel.js. A security vulnerability exists in versions prior to Nuxt.js v3.0.0-rc.13. An attacker exploited the vulnerability to execute a cross-site scripting attack...

Certifi 数据伪造问题漏洞

Certifi is a Python SSL certificate from Certifi Open Source. A data forgery vulnerability exists in Certifi versions 2017.11.05 through 2022.12.07, which can be exploited by an attacker to remove the root certificate from the root store "TrustCor"...

Cybozu Remote Service 资源管理错误漏洞

Cybozu Remote Service is a remote service management software from Cybozu Japan. It is used to access the Cybozu internal system. A security vulnerability exists in Cybozu Remote Service versions 4.0.0 through 4.0.3, which is caused by uncontrolled resource consumption...

PT-2022-35285 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue arises when the code attempts to access the sk wq of a socket sock that is already dead. This could potentially lead to security vulnerabilities, although the actual impact and...

Joomla! 信息泄露漏洞

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! versions 4.0.0 through 4.2.3. An attacker could exploit the vulnerability to disclose sensitive information...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. F5 BIG-IP suffers from an input validation error vulnerability that stems from an undisclosed input that could cause the Traffic Management...

UBUNTU-CVE-2022-2865

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, 15.2 to 15.2.4 and 15.3 prior to 15.3.2. It was possible to exploit a vulnerability in setting the labels colour feature which could lead to a stored XSS that allowed attackers to perform...