CVE-2023-47219 QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...

CVE-2023-47219

CVE-2023-47219 affects QNAP QuMagie. The connected PT-2023-9130 entry documents a SQL injection in QuMagie versions prior to 2.2.1, which could allow authenticated users to inject malicious code over the network. Root cause: insufficient protection of the SQL query structure. Impact: potential ar...

QNAP Systems QuMagie Command Injection Vulnerability

QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A command injection vulnerability exists in QNAP Systems QuMagie prior to version 2.2.1, which stems from the presence of an operating system command injection vulnerability that could allow an authenticated user to...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2023-38677 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

CVE-2023-50725

Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. The following paths in resque-web have been found to be vulnerable to reflected XSS: "/failed/?class=alertdocument.cookie" and "/queues/". This issue has been patched in...

Resque Cross-Site Scripting Vulnerability

Resque is a Redis-powered library open-sourced by Resque for creating background jobs, placing them on multiple queues and processing them later. A cross-site scripting vulnerability exists in versions of Resque prior to 2.2.1, which stems from vulnerability to reflective cross-site scripting XSS...

WordPress CURCY Plugin <= 2.2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software CURCY Type Plugin Vulnerable versions = 2.2.0.1 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50831 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5702a980d547 Credits LVT-tholv2k Required privilege Contributor...

PT-2023-31624 · Resque · Resque

Name of the Vulnerable Software and Affected Versions: Resque versions prior to 2.2.1 Description: The issue concerns a reflected XSS vulnerability in the resque-web component of the Resque library. Specifically, the vulnerability affects the following paths: "/failed/?class=alertdocument.cookie"...

CVE-2023-49165

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...

CVE-2023-49165 WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...

UBUNTU-CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...

CVE-2023-48930

xinhu xinhuoa 2.2.1 contains a File upload vulnerability...

PT-2023-31014 · Unknown · Xinhu Xinhuoa

Name of the Vulnerable Software and Affected Versions: xinhu xinhuoa version 2.2.1 Description: The issue is related to a File upload vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-48930

The CVE-2023-48930 entry concerns xinhu xinhuoa v2.2.1, which is affected by a File upload vulnerability. The available documents identify the affected software and the vulnerability class but do not provide concrete exploit code, affected subsystems beyond the file upload flaw, root-cause detail...

CVE-2023-48930

xinhu xinhuoa 2.2.1 contains a File upload vulnerability...

xinhu Security Breach

xinhu Xinhu is a free and open source office OA system by the individual developer of Rain Rock rainrocka. A security vulnerability exists in xinhu version 2.2.1, which stems from a file upload vulnerability...

VulnCheck KEV: CVE-2023-1177

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1...

CVE-2023-48317

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Vatsa Display Custom Post allows Stored XSS.This issue affects Display Custom Post: from n/a through 2.2.1...