1496 matches found
Campbell Scientific CSI Web Server 安全漏洞
Campbell Scientific CSI Web Server is a web server from Campbell Scientific. A security vulnerability exists in Campbell Scientific CSI Web Server version 1.6 and prior versions, which originates when the password for a file is stored in a weakly encoded format, which allows an attacker to decode...
PT-2024-41052 · Unknown · Roundcube Webmail
Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions 1.6.x Description: The issue concerns several security problems, including cross-site scripting XSS vulnerabilities in handling SVG animate attributes and list columns from user preferences, as well as a command...
CVE-2024-31351
Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6...
WordPress plugin Copymatic 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
PT-2024-23995 · Unknown · Copymatic – Ai Content Writer & Generator
Name of the Vulnerable Software and Affected Versions: Copymatic – AI Content Writer & Generator versions 1.6 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Copymatic – AI Content Writer & Generator. This allows for the uploa...
WordPress Copymatic plugin <= 1.6 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Francois Harvey Patchstack Alliance in WordPress Plugin Copymatic versions = 1.6...
RHEL 7 : postgresql-jdbc (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - postgresql-jdbc: Arbitrary File Write Vulnerability CVE-2022-26520 - pgjdbc is an open source postgresql...
PT-2024-3324 · Moxa · Nport 5100A Series
Name of the Vulnerable Software and Affected Versions: NPort 5100A Series versions prior to 1.6 Description: The issue exists due to the failure to protect the web page structure, allowing a remote attacker to escalate privileges. The vulnerability is caused by not correctly neutralizing...
MOXA NPort 5100A 安全漏洞
MOXA NPort 5100A is a general-purpose device networking server from MOXA, China. A cross-site scripting vulnerability exists in the MOXA NPort 5100A v1.6 and earlier firmware versions, which originates from failure to properly neutralize user-controllable inputs before placing them in the output,...
CVE-2023-48906
CVE-2023-48906 describes a stack overflow in Btstack (versions 1.6 and earlier) triggered by crafted input to the integral function char_for_nibble, leading to a denial of service. Multiple sources (NVD, Red Hat, CNVD, CNNVD, CVE list, etc.) confirm the issue and affected product/version. The ava...
Btstack 安全漏洞
Btstack is a BlueKitchen open source implementation of the official BlueKitchen Bluetooth stack. A security vulnerability exists in Btstack version 1.6 and earlier. An attacker exploited the vulnerability to cause a system denial of service via a specially crafted charfornibble function...
PT-2024-22732 · Webvitaly · Webvitaly Sitekit
Name of the Vulnerable Software and Affected Versions: Webvitaly Sitekit versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
WordPress Sitekit Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
Software Sitekit Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Scripting XSS CVE CVE-2024-29111 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c6b957dd4df3 Credits CatFather Required privilege Contribut...
BIT-POSTGRESQL-JDBC-DRIVER-2022-41946 TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc
pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...
Security Advisory 0091
Security Advisory 0091 . CSAF PDF Date: February 20, 2024 Revision | Date | Changes ---|---|--- 1.0 | February 20, 2024 | Initial release The CVE-ID tracking this issue: CVE-2023-6068 CVSSv3.1 Base Score: 3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Common Weakness Enumeration: CWE-283 Improper Access...
PT-2024-20667 · WordPress · Contact Form
Name of the Vulnerable Software and Affected Versions: WP Contact Form versions 1.6 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the WP Contact Form, allowing unauthorized actions to be performed on behalf of a user without their knowledge. This can lead to various...
UBUNTU-CVE-2024-1329
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14...
CVE-2024-24836
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Audrasjb GDPR Data Request Form allows Stored XSS.This issue affects GDPR Data Request Form: from n/a through 1.6...
