1881 matches found
GHSA-FRM9-7PM9-5RGC SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
The silverstripe/comments module, the cwp/starter-theme and the cwp/watea-theme include an outdated version of jQuery by default, which contains XSS vulnerabilities if user input is used in certain contexts. Though no known exploit has been found for these in the existing usage, user customisatio...
CVE-2024-5380 jsy-1 short-url admin.php cross site scripting
A vulnerability classified as problematic has been found in jsy-1 short-url 1.0.0. Affected is an unknown function of the file admin.php. The manipulation of the argument url leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.0.0 is able to address...
CVE-2024-5380
The CVE-2024-5380 entry describes a cross-site scripting (XSS) vulnerability in the Short URL system by jsy-1, affecting version 1.0.0. The flaw is located in an unknown function within admin.php where manipulating the url parameter enables remote exploitation. A fix exists in version 2.0.0, via ...
PT-2024-25035 · Unknown · Offerbox App For Android +1
Name of the Vulnerable Software and Affected Versions: OfferBox App for Android versions 2.0.0 through 2.3.17 OfferBox App for iOS versions 2.1.7 through 2.6.14 Description: The 'OfferBox' App for Android and iOS uses a hard-coded secret key for JWT. This secret key may be retrieved if the...
WordPress plugin Phlox Shop 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-12775 · Unknown · Averta Phlox Shop
Name of the Vulnerable Software and Affected Versions: Averta Phlox Shop versions n/a through 2.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion in Averta Phlox Shop...
WordPress plugin Kognetiks Chatbot for WordPress 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
PT-2024-24787 · Kognetiks · Kognetiks Chatbot For Wordpress
Name of the Vulnerable Software and Affected Versions: Kognetiks Chatbot for WordPress versions n/a through 2.0.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the Kognetiks Chatbot for WordPress. This allows for the upload of files with...
Nautobot 安全漏洞
Nautobot is a web automation platform by the individual developer of Nautobot. A security vulnerability exists in Nautobot that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability. Affected products and versions: Nautobot versions prior to 1.5.0 through 1.6.20, and...
PT-2024-13740 · Shenzhen · Shenzhen Jf6000 Cloud Media Collaboration Processing Platform
Name of the Vulnerable Software and Affected Versions: Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 Shenzhen JF6000 Cloud Media Collaboration Processing Platform software version V2.0.0 build 6245 Description: The issue is related to Incorrect Access...
JF6000 Cloud Media Collaboration Processing Platform 固件V1.2.0和、软件版本V2.0.0 build 6245 安全漏洞
Shenzhen Jieshi Feitong Technology JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from Shenzhen Jieshi Feitong Technology, China. JF6000 Cloud Media Collaboration Processing Platform is a cloud media collaboration processing platform from...
WordPress Pretty Google Calendar Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)
Software Pretty Google Calendar Type Plugin Vulnerable versions = 1.7.2 Fixed in 2.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33640 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e6c5ddcc221c Credits LVT-tholv2k Required privilege...
UBUNTU-CVE-2024-28825
Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...
CVE-2024-28825
CVE-2024-28825 affects Checkmk installations where login attempts are not adequately limited. The vulnerability exists in multiple Checkmk branches prior to fixes: 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and (EOL) 2.0.0. Root cause: insufficient restriction on excessive authentication attempts for ce...
PT-2024-22593 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0b5 Checkmk versions prior to 2.2.0p26 Checkmk versions prior to 2.1.0p43 Checkmk version 2.0.0 Description: The issue is related to improper restriction of excessive authentication attempts on some authenticatio...
AZL-39942 CVE-2024-31583 affecting package pytorch for versions less than 2.0.0-4
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
WordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Order Limit for WooCommerce versions = 2.0.0...
WordPress Plugin PeproDev Ultimate Invoice 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
