CVE-2023-23877 WordPress Pinterest RSS Widget Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in bkmacdaddy designs Pinterest RSS Widget plugin = 2.3.1 versions...

AZL-44391 CVE-2023-3618 affecting package openjpeg2 2.3.1-12

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tiffax3.c, resulting in a denial of service...

PT-2023-33055 · Unknown · Connect-Cms

Name of the Vulnerable Software and Affected Versions: Connect-CMS versions 1.7.1 and earlier Connect-CMS versions 2.3.1 and earlier Description: There is a Privilege Escalation issue on the management system of Connect-CMS. Recommendations: For Connect-CMS versions 1.7.1 and earlier, upgrade to...

PT-2023-25643 · Unknown · Cloudpanel

Name of the Vulnerable Software and Affected Versions: CloudPanel versions prior to 2.3.1 Description: The issue is related to insecure file upload, which leads to privilege escalation and authentication bypass. This allows unauthorized access and elevated privileges. Recommendations: For version...

CVE-2023-35779 WordPress Seed Fonts Plugin 2.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Seed Webs Seed Fonts plugin = 2.3.1 versions...

WordPress plugin Seed Webs Seed Fonts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Seed Fonts Plugin 2.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Seed Fonts Type Plugin Vulnerable versions 2.3.1 Fixed in 2.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35779 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d26dff3fd41d Credits yuyudhn Required privilege...

PT-2023-11873

Name of the Vulnerable Software and Affected Versions Flexible Checkout Fields for WooCommerce plugin for WordPress versions up to and including 2.3.1 Description The issue is caused by missing authorization checks on the updateSettingsAction function, which is called via an admin init hook, and...

JetBrains Ktor framework 安全漏洞

JetBrains Ktor framework is a web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor framework versions prior to 2.3.1, which stems from a header for authentication data that can be added to an exception message...

PT-2023-24824 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 2.3.1 Description: The issue allows headers containing authentication data to be added to the exception's message. This could potentially expose sensitive information. Recommendations: For versions prior to...

CVE-2023-2780

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

PYSEC-2023-69

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

PYSEC-2023-69

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

Mlflow 安全漏洞

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow versions prior to 2.3.1 that stems from being able to read local files...

CVE-2023-2780 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

CVE-2023-2780 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1...

PT-2023-21350 · Mlflow · Mlflow

Name of the Vulnerable Software and Affected Versions: mlflow versions prior to 2.3.1 Description: The issue is related to path traversal, where the sequence '..filename' can be used to bypass security restrictions. This allows unauthorized access to files and directories outside the intended...

AZL-43927 CVE-2023-30086 affecting package openjpeg2 2.3.1-12

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

Authentication flaw

libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication, the attacker may be able to establis...

CVE-2023-31127 DMTF-2023-0001: SPDM mutual authentication bypass

libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication, the attacker may be able to establis...