xuxueli xxl-job Cross-Site Request Forgery Vulnerability

Cross Site Request Forgery CSRF vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0 allows remote attackers to execute arbitrary code and esclate privileges via crafted .html file...

CVE-2020-24922

The CVE-2020-24922 CSRF vulnerability affects xuxueli xxl-job (xxl-job-admin/user/add) in version 2.2.0. The underlying issue enables a CSRF attack via a crafted .html file that can lead to remote arbitrary code execution and privilege escalation. This aligns with published entries across multipl...

PT-2023-24095 · WordPress · Grid-Kit-Premium

Name of the Vulnerable Software and Affected Versions: grid-kit-premium WordPress plugin versions prior to 2.2.0 Description: The issue concerns Reflected Cross-Site Scripting, where some parameters and generated URLs are not properly escaped before being outputted in attributes. This could be...

CVE-2023-39023

university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.DefaultExecutorManager.configure. This vulnerability is exploited via passing an unchecked argument...

VulnCheck KEV: CVE-2023-37999

Improper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega: from n/a through 2.2.0...

Buffer overflow

A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file...

UBUNTU-CVE-2023-30259

A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file...

LibreCAD 缓冲区错误漏洞

LibreCAD is an open source CAD Computer Aided Design application from the LibreCAD organization. A security vulnerability exists in LibreCAD version 2.2.0, which stems from a buffer overflow vulnerability in the importhp plugin...

CVE-2023-30259

CVE-2023-30259 : A buffer overflow in the importshp plugin of LibreCAD 2.2.0 is the root cause, allowing an attacker to obtain sensitive information via a crafted DBF file. Affected component: LibreCAD (importshp plugin). Exploitation appears to be local (attack vector: LOCAL) with low complexity...

WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection

Software Tutor LMS Type Plugin Vulnerable versions = 2.1.10 Fixed in 2.2.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-25990 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f1abc8ca80b8 Credits Rafie Muhammad Patchstack Required privilege Tutor...

WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection

Software Tutor LMS Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-25800 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 098051db4335 Credits Rafie Muhammad Patchstack Required privilege Student...

CVE-2022-47174

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

CVE-2023-27921

JINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may lead to data acquired by a sensor of the affected product being decrypted by a network-adjacent attacker...

PT-2023-18901 · Ciq Api · Ciq Api

Name of the Vulnerable Software and Affected Versions: CIQ API versions 2.2.0 through 4.1.7 Description: The Toybox.Ant.BurstPayload.add API method suffers from a type confusion issue, which can result in an out-of-bounds write operation. A malicious application could create a specially crafted...

PT-2023-21421 · Jins · Jins Meme Core Firmware

Name of the Vulnerable Software and Affected Versions: JINS MEME CORE Firmware versions 2.2.0 and earlier Description: The issue is related to a hard-coded cryptographic key used in the firmware, which may allow a network-adjacent attacker to decrypt data acquired by a sensor of the affected...

CVE-2023-2832

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2832 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-2832 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2022-41608 WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Thomas Belser Asgaros Forum plugin = 2.2.0 versions...

WordPress Plugin Asgaros Forum 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...