Chris

Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting. Attackers can retrieve a deterministically derived API key from the `gptApiKey` JavaScript variable in the HTML source of any page. This key allows the submission of malicious translation payloads to the '/wp-json/gptranslate/v1/request' endpoint, resulting in the execution of arbitrary web scripts when a user accesses an affected page.

The plugin is susceptible to Stored Cross-Site Scripting through admin settings due to inadequate input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue only impacts multi-site installations and those where unfiltered html has been disabled.

The Double the Donation plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allows authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue only impacts multi-site installations and those where unfiltered html has been disabled.

The Featured Image plugin for WordPress is susceptible to Stored Cross-Site Scripting through image metadata. Insufficient input sanitization and output escaping allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue only affects multi-site installations and installations where unfiltered html has been disabled.

The issue is related to the storage of critical information in an unencrypted manner. An attacker with write access to the XML configuration file can obtain cleartext passwords by adding an export trigger. The vendor's position is that the password database is not intended to be secure against an attacker who has that level of access to the local PC. Researchers argue that this is a security flaw, as no action is required from the KeePass owner to export passwords, making it impossible even in situations where an actor gains access to the device.

The issue allows for a remotely exploitable flaw, specifically a Server-Side Request Forgery (SSRF) vulnerability. This occurs because the library performs discovery first, and then verification, enabling an attacker to change the URL used for discovery and trick the server into connecting to a potentially private server not publicly accessible. The severity of this issue can range from medium to critical, depending on how the ruby-openid library is employed by web application developers. Developers who based their OpenID integration heavily on the example app provided by the project are at the highest risk.

The issue allows for Server-Side Request Forgery (SSRF) via a crafted OpenID 2.0 assertion request using the HTTP GET method. This is related to the openid.php file in LightOpenID.

Name of the Vulnerable Software and Affected Versions: Practecol's Guardzilla All-In-One Video Security System (affected versions not specified) Description: The issue is related to a static, hard-coded credential used in the cloud-based storage system of the Guardzilla device. This allows an attacker to access the private data of all users of the device. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

There is a possible out-of-bounds read in the Linux kernel. The `restart syscall` function uses uninitialized data when restarting `compat sys nanosleep`. However, this issue is disputed because the code path is reportedly unreachable.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, via a URI that does not match certain types of wildcard patterns. This can be demonstrated by attacks against mod autoindex in httpd when a /*/WEB-INF/ configuration pattern is used.

The issue is related to an integer overflow in the FRAMESET element implementation. This might allow remote attackers to execute arbitrary code via a large number of values in the `cols` attribute, leading to a heap-based buffer overflow.

The issue concerns a default system password setting of ACCESS in Microsoft Dynamics GP, which could facilitate bypassing of intended access restrictions by remote authenticated users through unspecified means.

The issue concerns the encryption method used by Microsoft Dynamics GP. It utilizes a substitution cipher to encrypt certain fields, including the system password field. This encryption method makes it easier for remote authenticated users to obtain sensitive information by decrypting the field's contents.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `debug` parameter in index.php. This can be used to steal MD5 hashes of passwords.