682 matches found
BIT-2020-15190
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the tf.rawops.Switch operation takes as input a tensor and a boolean and outputs two tensors. Depending on the boolean value, one of the tensors is exactly the input tensor whereas the other one should be an empty tensor. Howeve...
CVE-2023-23373
An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 2023/06/15 and later...
CVE-2023-23373
An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 2023/06/15 and later...
PT-2023-18926 · Qusbcam2 · Qusbcam2
Name of the Vulnerable Software and Affected Versions: QUSBCam2 versions prior to 2.0.3 Description: An OS command injection issue has been reported, allowing users to execute commands via a network if exploited. Recommendations: For versions prior to 2.0.3, update to version 2.0.3 or later to...
PT-2023-29610 · WordPress · Wpdevart Gallery – Image/Video Gallery With Thumbnails
Name of the Vulnerable Software and Affected Versions: wpdevart Gallery – Image and Video Gallery with Thumbnails plugin versions = 2.0.3 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This allows for the storage of malicious scripts that can be...
CVE-2023-45629
Cross-Site Request Forgery CSRF vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin = 2.0.3 versions...
CVE-2023-43983
Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...
Sql injection
Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php...
PT-2023-29058 · Presto Changeo · Presto Changeo Attributegrid
Name of the Vulnerable Software and Affected Versions: Presto Changeo attributegrid versions up to 2.0.3 Description: The issue is related to a SQL injection vulnerability via the component disable json.php. This vulnerability was discovered in Presto Changeo attributegrid. Recommendations: For...
WordPress plugin WP Job Portal SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
WordPress User Private Files Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software User Private Files Type Plugin Vulnerable versions = 2.0.3 Fixed in 2.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4636 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a3eddd47293a Credits Shuning Xu Required...
PT-2023-19239 · WordPress · Swashata Wp Category Post List Widget
Name of the Vulnerable Software and Affected Versions: Swashata WP Category Post List Widget plugin versions = 2.0.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker with contributor or higher privileges to inject maliciou...
CVE-2023-3507
The WooCommerce Pre-Orders WordPress plugin before 2.0.3 has a flawed CSRF check when canceling pre-orders, which could allow attackers to make logged in admins cancel arbitrary pre-orders via a CSRF attack...
CVE-2023-3508
The CVE-2023-3508 entry concerns the WooCommerce Pre-Orders WordPress plugin with versions prior to 2.0.3. The root cause is a flawed CSRF check when processing tab actions, enabling an attacker to trigger actions via CSRF on behalf of a logged-in admin. Reported impacts include the ability to em...
CVE-2023-39155
Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it...
WordPress Events Addon for Elementor Plugin < 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Events Addon for Elementor Type Plugin Vulnerable versions 2.0.3 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2ee0a2921c21 Credits Rafie Muhammad Patchsta...
WordPress Topcat Lite Theme <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Topcat Lite Type Theme Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c481a9476e2e Credits Rafie Muhammad Patchstack Required...
CVE-2023-28751
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Wpmet Wp Ultimate Review plugin = 2.0.3 versions...
PrestaShop SQL注入漏洞
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. A security vulnerability exists in PrestaShop Module City Autocomplete, which stems from the presence of a SQL...