CVE-2023-6422

Summary: CVE-2023-6422 affects BigProf Online Clinic Management System 2.2. The vulnerability is a persistent XSS in the FirstRecord parameter of the endpoint /clinic/patients_view.php due to insufficient encoding of user-supplied input. This can allow an attacker to store JavaScript payloads on ...

PT-2023-32654 · Unknown · Bigprof Online Clinic Management System

Name of the Vulnerable Software and Affected Versions: BigProf Online Clinic Management System version 2.2 Description: A vulnerability has been discovered in the system, which does not sufficiently encode user-controlled input, resulting in persistent XSS through the "/clinic/disease symptoms...

BigProf Online Clinic Management System Cross-Site Scripting Vulnerability

BigProf Online Clinic Management System is an online clinic management system from BigProf, Inc. A cross-site scripting vulnerability exists in BigProf Online Clinic Management System version 2.2, which stems from a cross-site scripting vulnerability in the FirstRecord parameter of...

GHSA-PH87-4X2G-6HP4 Jenkins NeuVector Vulnerability Scanner Plugin missing permission check

Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier does not perform a permission check in a connection test HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password...

PT-2023-32453 · WordPress · Wpb Show Core

Name of the Vulnerable Software and Affected Versions: WPB Show Core WordPress plugin versions through 2.2 Description: The issue concerns server-side request forgery SSRF via the path parameter. This allows for potentially malicious requests to be made to the server. Recommendations: For WPB Sho...

WordPress plugin WPB Show Core security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

OpenZFS Security Vulnerability

OpenZFS is an open source storage platform. It includes the functionality of a traditional file system and volume manager. A security vulnerability exists in OpenZFS versions 2.1.13 and earlier, and versions 2.2.x through 2.2.1, which stems from replacing the contents of a file with zero-valued...

CVE-2023-34024

A vulnerability in northswitch WP Full Auto Tags Manager wp-full-auto-tags-manager.This issue affects WP Full Auto Tags Manager: from n/a through = 2.2...

CVE-2023-46627

A vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap.This issue affects WP Simple HTML Sitemap: from n/a through = 2.2...

Monitoring and Early Warning System Security Vulnerability

Monitoring and Early Warning System is a monitoring and early warning system of Shanghai CTI Navigation Technology Co. A security vulnerability exists in version 2.2 of the Shanghai CTI Navigation CTI Monitoring and Early Warning System, which originates from a parameter ID in the file...

CVE-2023-45004

Unauth. Reflected Cross-Site Scripting XSS vulnerability in wp3sixty Woo Custom Emails plugin = 2.2 versions...

PT-2023-29345 · Wp3Sixty · Wp3Sixty Woo Custom Emails

Name of the Vulnerable Software and Affected Versions: wp3sixty Woo Custom Emails plugin versions = 2.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing them to...

PT-2023-29025 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in multisit...

PT-2023-23242 · Wp Experts.In Team · Wp Categories Widget

Name of the Vulnerable Software and Affected Versions: WP-EXPERTS.IN TEAM WP Categories Widget plugin versions = 2.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...

PT-2023-12172 · Tripspark · Tripspark Veo Transportation

Name of the Vulnerable Software and Affected Versions: TripSpark VEO Transportation versions 2.2.x NovusEDU versions 2.2.x Description: The issue allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL...

Ubuntu 20.04 LTS : HAProxy vulnerability (USN-6294-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6294-2 advisory. USN-6294-1 fixed vulnerabilities in HAProxy. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding description...

Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (CVE-2021-32970)

Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions. This plugin only works with Tenable.ot. Please visit...

Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Neutralization of Special Elements Used in an OS Command (CVE-2021-32974)

Improper input validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier may allow a remote attacker to execute commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

City Variety LMS 2.2 Cross Site Scripting

==================================================================================================================================== | Title : cityvariety LMS 2.2 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendor :...