CVE-2023-47665

Unauth. Reflected Cross-Site Scripting XSS vulnerability in edwardplainview Plainview Protect Passwords plugin = 1.4 versions...

CVE-2023-46210

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...

WordPress Tab Ultimate Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Tab Ultimate Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5667 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 6b4d31988178 Credits István Márton Required privileg...

CVE-2023-43667

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can create misleading or false log records, making it harder to audit and trace malicious...

CVE-2023-43668

Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, some sensitive params checks will be bypassed, like "autoDeserizalize","allowLoadLocalInfile".... . Users are advised to upgrade to Apache InLong's 1.9.0 or...

CVE-2023-43072

Dell SmartFabric Storage Software v1.4 and earlier contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this vulnerability, leading to ability to execute arbritrary shell commands...

CVE-2023-43073

Dell SmartFabric Storage Software v1.4 and earlier contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data...

Dell SmartFabric Storage Software 安全漏洞

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software version 1.4 suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

PT-2023-28682 · Dell · Dell Smartfabric Storage

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric Storage Software versions 1.4 and earlier Description: The issue is related to an improper access control vulnerability in the Command Line Interface CLI of the software. A local, possibly unauthenticated attacker could explo...

CVE-2023-5295

The Blog Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

WordPress Comments by Startbit Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Comments by Startbit Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5295 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 790370410166 Credits István Márton Required...

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:3739-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3739-1 advisory. - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to caus...

ImpressionTech CMS 1.4 SQL Injection

==================================================================================================================================== | Title : ImpressionTech CMS ٍv1.4 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 61.0.1...

WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Sitekit Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27628 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5713c6615f25 Credits Mika Required privilege Contributor...

UBUNTU-CVE-2020-22219

Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder...

CVE-2023-31246

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-3787

CVE-2023-3787 affects Codecanyon Tiva Events Calender version 1.4. The root cause is manipulation of the name argument, enabling cross-site scripting. Exploitation is described as remote and the exploit has been disclosed publicly; multiple sources corroborate XSS in this product. Remediation det...

ShowMojo MojoBox Digital Lockbox 安全漏洞

The ShowMojo MojoBox Digital Lockbox is a digital lockbox from ShowMojo. A security vulnerability exists in the ShowMojo MojoBox Digital Lockbox version 1.4, which stems from4 Vulnerability to authentication bypass, and vulnerability to replay attacks on the unlocking mechanism via Bluetooth Low...

PT-2023-26150 · Unknown · Codecanyon Tiva Events Calender

Name of the Vulnerable Software and Affected Versions: Codecanyon Tiva Events Calender version 1.4 Description: A problematic vulnerability was found in the software, affecting unknown code. The manipulation of the name argument leads to cross-site scripting. The attack can be initiated remotely...

Tiva Events Calender 跨站脚本漏洞

Tiva Events Calender is a calendar application by the individual developer of tivatheme. A cross-site scripting vulnerability exists in Tiva Events Calender version 1.4, which stems from the parameter name leading to cross-site scripting...