WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WM Zoom versions = 1.0...

WordPress WM Zoom Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software WM Zoom Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50556 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b6b6fd1f7c60 Credits SOPROBRO Required privilege Contributor Published ...

SUSE CVE-2024-46815

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to be checked to avoid a negative index when accessing readerwmsetsnumvalidsets - 1. This fixes an OVERRUN issue reported by Coverity...

UBUNTU-CVE-2024-46815

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to be checked to avoid a negative index when accessing readerwmsetsnumvalidsets - 1. This fixes an OVERRUN issue reported by Coverity...

[SECURITY] Fedora 40 Update: qt5ct-1.1-24.fc40

qt5ct allows users to configure Qt5 settings theme, font, icons, etc. under DE/WM without Qt integration...

Malicious code in wm-search-deployables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75117d2388716c2ebc07fc5320bc6b6d5130dc106da865682566ea803272aa8d The OpenSSF Package Analysis project identified 'wm-search-deployables' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1184 Malicious code in wm-search-deployables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75117d2388716c2ebc07fc5320bc6b6d5130dc106da865682566ea803272aa8d The OpenSSF Package Analysis project identified 'wm-search-deployables' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in wm-lib-api-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c48e2ab0480956dd0db4c0bc2e946be8a52112fb31f959900edb9a914f02367 The OpenSSF Package Analysis project identified 'wm-lib-api-error-handler' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

wm-ssl.com Improper Access Control vulnerability OBB-3815691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Software AG webMethods Access Control Error Vulnerability

Software AG webMethods is Software AG's suite of integration and application development tools used to help organizations with tasks such as application integration, data integration, business process management, and application development. webMethods is designed to help organizations better...

ROS-2-2122

2.2122 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotel...

Malicious code in wm-webpack-player-sri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ce8f86b27a02853a91d351ebf67ea4c8b697d62b1c65c295b7a01cfa89148ec The OpenSSF Package Analysis project identified 'wm-webpack-player-sri' @ 0.0.71 npm as malicious. It is considered malicious because: - The...

eishockey-wm-tickets.de Cross Site Scripting vulnerability OBB-3254856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eishockey-wm-tickets.de Cross Site Scripting vulnerability OBB-3210537

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in wm-accounts-auth-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cdd1cfc8b0646198270138deb5824d92d72858377c39f84124570e1273629a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-dagre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9e690969a3ea29abd36c88c828fccb854f99546a49b3272c65e9fc218fd690 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7188 Malicious code in wm-accounts-auth-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cdd1cfc8b0646198270138deb5824d92d72858377c39f84124570e1273629a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-accounts-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06869f445269b5ca5fa377ca129da8d2c93b5888c781ad4bb91b20a9e31e76be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wm-shared-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92dd52928f108691d1d01c6e868a6732508ac110b355d42ec67fcd2817ee676e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7205 Malicious code in wm-shared-consts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92dd52928f108691d1d01c6e868a6732508ac110b355d42ec67fcd2817ee676e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...