WordPress WP Media Category Management Plugin < 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Media Category Management Type Plugin Vulnerable versions 2.1.3 Fixed in 2.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7b24b5081962 Credits Rafie Muhammad...

WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software NOO Timetable Type Plugin Vulnerable versions = 2.1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-45828 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4af0996a38ae Credits Cat Required privilege...

CVE-2020-21052

Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of the /post/addComment function...

PT-2023-3434 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: mp4v2 version 2.1.3 Description: The issue is related to a memory leak in the mp4v2 library when a method calling MP4File::ReadBytes allocates memory but does not catch exceptions thrown by ReadBytes. This can lead to a denial of service...

UBUNTU-CVE-2023-33716

mp4v2 v2.1.3 was discovered to contain a memory leak via the class MP4StringProperty at mp4property.cpp...

CVE-2023-33718

mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString at mp4fileio.cpp...

PT-2023-24455 · Mp4V2 · Mp4V2

Name of the Vulnerable Software and Affected Versions: mp4v2 version 2.1.3 Description: A memory leak was discovered in mp4v2 via the MP4File::ReadString function at mp4file io.cpp. Recommendations: For mp4v2 version 2.1.3, consider restricting access to the MP4File::ReadString function until a...

LibreCAD: Multiple Vulnerabilities

Background LibreCAD is a generic 2D CAD program. Description Multiple vulnerabilities have been discovered in LibreCAD. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this...

CVE-2023-30330

SoftExpert SE Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gndefaultframe/2.0/defaultframefilter.php...

PT-2023-22638 · Softexpert · Softexpert Excellence Suite

Name of the Vulnerable Software and Affected Versions: SoftExpert SE Excellence Suite versions prior to 2.1.3 Description: The issue concerns Local File Inclusion in the function /se/v42300/generic/gn defaultframe/2.0/defaultframe filter.php. Recommendations: For versions prior to 2.1.3, update t...

WordPress Cream Blog Theme <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Cream Blog Type Theme Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28687 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 08758c27269b Credits László Radnai Required...

pfSense 路径遍历漏洞

pfSense is a network firewall for FreeBSD Linux. A security vulnerability exists in pfSense version v.2.1.3, which stems from a directory traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

Sql injection

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

SUSE CVE-2015-0225

The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookiecart parameter to /index.php/cart/num...

CVE-2020-21120

CVE-2020-21120 affects UQCMS 2.1.3 and is caused by an SQL injection in the cart functionality (home\controls\cart.class.php) that can be exploited via the cookie_cart parameter to /index.php/cart/num to execute arbitrary commands. The CVSS metrics in the source indicate a critical impact (C/H, I...

PT-2023-14305 · WordPress · Web Invoice Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Web Invoice WordPress plugin versions 2.1.3 and earlier Description: The issue arises from the plugin's failure to properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection. This can be exploited ...