14962 matches found
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29319: Server-Side Request Forgery (SSRF)
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
OpenPLC Cross-Site Scripting Vulnerability
OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. OpenPLC suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can ...
CVE-2024-29319
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...
PT-2024-22859 · Unknown · Volmarg Personal Management System
Name of the Vulnerable Software and Affected Versions: Volmarg Personal Management System version 1.4.64 Description: The Volmarg Personal Management System is vulnerable to Server Side Request Forgery SSRF via uploading a SVG file. This allows the server to make unintended HTTP and DNS requests ...
CVE-2024-29319
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...
CVE-2024-29319
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29319
CVE-2024-29319 affects Volmarg Personal Management System 1.4.64, with a server-side request forgery (SSRF) vulnerability triggered by uploading an SVG file. The server can issue unintended HTTP and DNS requests to an attacker-controlled server due to the SVG handling logic. Multiple sources (Red...
CVE-2024-29318: Improper Neutralization of Input During Web Page Generation
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29318
CVE-2024-29318 affects Volmarg Personal Management System (Volmarg PMS) v1.4.64. A stored cross-site scripting (XSS) vulnerability arises when uploading an SVG file that contains embedded JavaScript code, which can lead to script execution in a victim’s session. The root cause is insufficient val...
WordPress Funnel Builder for WordPress by FunnelKit plugin <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by wesley wcraft in WordPress Plugin Funnel Builder by FunnelKit versions = 3.3.1...
CVE-2024-37741
OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture...
PT-2024-27728
Name of the Vulnerable Software and Affected Versions OpenPLC versions 3 through 9cd8f1b Description The issue allows for XSS via an SVG document when used as a profile picture. Recommendations For versions 3 through 9cd8f1b, avoid using SVG documents as profile pictures until a fix is available...
CVE-2024-37741
OpenPLC 3 through 9cd8f1b is affected by a cross-site scripting (XSS) vulnerability that can be triggered via an SVG document used as a profile picture. The issue arises from insufficient filtering/escaping of user-supplied data, enabling script execution within a victim’s browser. Affected produ...
CVE-2024-37741
OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture...