13 April 2023

13 results · Clear filters · Feed

• Medium 5.4
  CVE-2022-45358

  WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

  Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

  silkalns Activello
  Apr 13, 2023
• Medium 4.8
  CVE-2022-44625

  WordPress Cyklodev WP Notify Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

  Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions.

  Zephilou Cyklodev WP Notify
  Apr 13, 2023
• Medium 5.5
  CVE-2023-29573

  Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.

  Apr 13, 2023
• Medium 5.8
  CVE-2023-2021

  Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

  Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.

  nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist
  Apr 13, 2023
• Medium 5.3
  CVE-2023-2014

  Cross-site Scripting (XSS) - Generic in microweber/microweber

  Cross-site Scripting (XSS) - Generic in GitHub repository microweber/microweber prior to 1.3.3.

  microweber microweber/microweber microweber/microweber Packagist
  Apr 13, 2023
• Medium 5.5
  CVE-2023-25954

  KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile …

  Kyocera Document Solutions, TA Triumph-Adler GmbH, and Olivetti SpA KYOCERA Mobile Print, UTAX/TA MobilePrint, and Olivetti Mobile Print
  Apr 13, 2023
• Medium 6.5
  CVE-2023-22950

  An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any use…

  Apr 13, 2023
• Medium 4.9
  CVE-2023-22948

  An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key…

  Apr 13, 2023
• Medium 5.5
  CVE-2023-26263

  All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks…

  Apr 13, 2023
• Medium 5.5
  CVE-2023-26264

  All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks…

  Apr 13, 2023
• Medium 6.5
  CVE-2023-20866

  Spring Session session ID can be logged to the standard output stream

  In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes sensitive information to those who have access to the application logs and can be used for session hijacking. Specifically, an application …

  org.springframework.session:spring-session-core Maven
  Apr 13, 2023
• Medium 6.5
  CVE-2023-20863

  Spring Framework vulnerable to denial of service

  In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.

  libspring-java libspring-java org.springframework:spring-expression Debian Ubuntu Maven
  Apr 13, 2023
• Medium 5.5
  CVE-2022-48468

  protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

  protobuf-c protobuf-c protobuf-c libsignal-protocol-c Debian Ubuntu Azure Linux
  Apr 13, 2023