The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization a ...
Continue Reading
January 24, 2023
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.R ...
Continue Reading
January 24, 2023
Auth. Stored Cross-Site Scripting (XSS) vulnerability in Youtube shortcode Read More ...
Continue Reading
January 24, 2023
Auth. Stored Cross-Site Scripting (XSS) in Oi Yandex.Maps for WordPress Read More ...
Continue Reading
January 24, 2023
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can authenticate with the web socket service of the ONLYOFFICE document editor which is protected by JWT a ...
Continue Reading
January 23, 2023
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be forged due to a weak default URL signing key.Read More ...
Continue Reading
January 23, 2023
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the d ...
Continue Reading
January 23, 2023
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document.Read More ...
Continue Reading
January 23, 2023
Back to Main
