8772 matches found
CVE-2024-50520 WordPress Ancient World Linked Data plugin <= 0.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Peter J. Herrel Ancient World Linked Data ancient-world-linked-data-for-wordpress allows DOM-Based XSS.This issue affects Ancient World Linked Data: from n/a through = 0.2.1...
CVE-2024-50520
CVE-2024-50520 relates to the WordPress plugin “Ancient World Linked Data” (up to version 0.2.1). The issue is a DOM-based Cross-Site Scripting (XSS) caused by improper input neutralization during page generation, enabling script execution in the context of the affected site. Affected software: A...
PT-2024-34979 · Unknown · Bcristopeit Wow Guild Armory Roster
Name of the Vulnerable Software and Affected Versions: bcristopeit WoW Guild Armory Roster versions 0.5.5 and earlier Description: The issue affects the bchristopeit WoW Guild Armory Roster, allowing Stored XSS due to improper neutralization of input during web page generation. This can lead to...
WordPress plugin World Prayer Time 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Ancient World Linked Data 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2024-34312 · Unknown · World Prayer Time
Name of the Vulnerable Software and Affected Versions: World Prayer Time versions n/a through 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...
Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-10818 Malicious code in tautoak4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0a170170a102f43fd03d3b08bbcb53a572a5f48cde13250b3059ff3b332404a The OpenSSF Package Analysis project identified 'tautoak4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
Malicious code in tautoake4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-10819 Malicious code in tautoake4-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5bbdacc63f269510ff88a76b84cae8deaa666d09fa9f9272c1463acfdff86e5 The OpenSSF Package Analysis project identified 'tautoake4-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
CVE-2024-52574
A vulnerability has been identified in Teamcenter Visualization V14.2 All versions V14.2.0.14, Teamcenter Visualization V14.3 All versions V14.3.0.12, Teamcenter Visualization V2312 All versions V2312.0008, Teamcenter Visualization V2406 All versions V2406.0005, Tecnomatix Plant Simulation V2302...
Malicious code in take2-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caf0d2c986a7f85b5b656b1597d921f3642dca37fd0d5516208e69befb5cf53 The OpenSSF Package Analysis project identified 'take2-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in take3-hello-world (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3ab74f2bd476e91c4d2e0d1cd29fa80dfb82df59eb0d48c4fd32e6fec28ef39 The OpenSSF Package Analysis project identified 'take3-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2024-8744 · Siemens · Tecnomatix Plant Simulation +1
Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2302.0018 Tecnomatix Plant Simulation versions prior to V2404.0007 Teamcenter Visualization versions prior to V14.2.0.14 Teamcenter Visualization versions prior to V14.3.0.12 Teamcenter...
PT-2024-8746 · Siemens · Tecnomatix Plant Simulation +1
Name of the Vulnerable Software and Affected Versions: Teamcenter Visualization versions prior to V14.2.0.14 Teamcenter Visualization versions prior to V14.3.0.12 Teamcenter Visualization versions prior to V2312.0008 Teamcenter Visualization versions prior to V2406.0005 Tecnomatix Plant Simulatio...
Desktop client created folders with world-readable and world-writable permissions on Linux
None...
PT-2024-8514
Name of the Vulnerable Software and Affected Versions: Citrix Session Recording affected versions not specified Description: A limited remote code execution issue exists in Citrix Session Recording. Successful exploitation allows an attacker with authenticated access on the same intranet as the...
China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait
The China-aligned threat actor known as MirrorFace has been observed targeting a diplomatic organization in the European Union, marking the first time the hacking crew has targeted an entity in the region. "During this attack, the threat actor used as a lure the upcoming World Expo, which will be...
RHEL 7 : openstack-puppet-modules (RHSA-2017:0359)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:0359 advisory. openstack-puppet-modules provides a collection of Puppet modules which Red Hat OpenStack Platform director uses to install and configure OpenStack...
