CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bank-vaults, flux, aws-efs-csi-driver-fips, pulumi-language-yaml, kube-state-metrics-fips, bom, gomplate, tkn, prometheus-postgres-exporter-fips, metrics-server-fips, prometheus-pushgateway, terraform, prometheus-statsd-exporter, tekton-chains, trust-manager, cosign,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kaf, k3d, certificate-transparency, kubescape, conftest, kind, nghttp2, sigstore-scaffolding, stakater-reloader, weaviate, flux-helm-controller, pulumi-language-dotnet, frp, bom, gobuster, secrets-store-csi-driver, terraform-provider-azurerm, memcached-exporter, helm...

SUSE CVE-2010-3365

Mistelix 0.31 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2021-43353

The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisppluginsettingspage function found in the /crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31...

Crisp Live Chat < 0.32 - CSRF to Stored Cross-Site Scripting

The plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisppluginsettingspage function found in the /crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31...

PT-2019-12792 · Apache · Apache Incubator Superset

Name of the Vulnerable Software and Affected Versions: Apache Incubator Superset versions prior to 0.31 Description: The issue allows a user to query database metadata information from a database they have no access to, by using a specially crafted complex query. Recommendations: For versions pri...

CVE-2016-1211

Cross-site scripting XSS vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-3365

Mistelix 0.31 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Directory traversal

Mistelix 0.31 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3365

Mistelix 0.31 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3365

CVE-2010-3365 affects Mistelix 0.31, where a zero-length directory name placed in LD_LIBRARY_PATH allows local users to gain privileges via a Trojan horse shared library in the current working directory. Root cause is the manipulation of LD_LIBRARY_PATH leading to privilege escalation. The provid...

CVE-2010-3365

Mistelix 0.31 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tusimagenes/...

CVE-2008-2574

Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tusimagenes/...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...

CVE-2007-0508

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...

bbclone-rfi.txt

------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip...

BBClone 0.31 - 'selectlang.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip...

BBClone 0.31 (selectlang.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= BBClone 0.31 selectlang.php Remote File Inclusion Vulnerability =================================================================...

BBClone 0.31 - selectlang.php Remote File Inclusion

BBClone 0.31 - selectlang.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip...