style it project style it vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in fonts/font-form.php in the Style It plugin 1.0 and previous versions for WordPress allows remote malicious users to inject arbitrary web script or HTML via the mode parameter.

Style It Project Style It

The NSSCipherSuite option with ciphersuites enabled in mod_nss prior to 1.0.12 allows remote malicious users to bypass application restrictions.

Mod Nss Project Mod Nss

Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud, similar to Trello. The full path of the application is exposed to unauthorized users. It is recommended that the Nextcloud Deck app is upgraded to 1.2.11, 1.4.6, or 1.5.4. There is no workaroun...

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows a user to delete attachments of other users. There are currently no known workarounds. It is recommended that the Nextclo...

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is r...

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. It is possible to make a user send any POST request with an arbitrary body given they click on a malicious deep link on a Windows computer. (e.g. in a...

Nextcloud Desktop 3.6.1

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions users could be tricked into executing malicious code that would execute in their browser via HTML sent as a comment. It is recomm...

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized user could eventually get the cached data of a user that has...

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, which means that a user that has access to create TaskRuns can create their own Tasks that the Pipelines controller will ac...

Linuxfoundation Tekton Pipelines

libexpat prior to 2.4.9 has a use-after-free in the doContent function in xmlparse.c.

Libexpat Project Libexpat Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook