CVE-2023-31235 WordPress Participants Database plugin <= 2.4.9 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in xnau webdesign Participants Database participants-database.This issue affects Participants Database: from n/a through = 2.4.9...

CVE-2023-28499

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin = 2.4.9 versions...

Cross site scripting

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin = 2.4.9 versions...

PT-2023-21762 · WordPress · Slide Anything

Name of the Vulnerable Software and Affected Versions: Slide Anything – Responsive Content / HTML Slider and Carousel plugin versions prior to 2.4.9 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject...

WordPress Slide Anything Plugin < 2.4.9 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:slideanythingproject:slideanything"; ifdescription...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

Sql injection

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

JIZHICMS SQL Injection Vulnerability

Extreme Networks Technology JIZHICMS Extreme CMS is an open source content management system CMS from China's Extreme Networks Technology. A SQL injection vulnerability exists in Jizhicms version 2.4.9, which originates from a SQL injection vulnerability in the backend. An attacker can exploit th...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

CVE-2023-43836

CVE-2023-43836 affects Jizhicms 2.4.9 backend with a SQL injection in the backend that can reveal database information. The NVD entry lists CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, base score 6.5 (Medium), indicating network access, low complexity, and limited privileges required. The data ...

CVE-2023-43836

There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information...

WordPress Discussion Board Plugin <= 2.4.8 is vulnerable to Content Injection

Software Discussion Board Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-39161 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e808296acb35 Credits Abdi Pranata Required privilege...

Joomla com_booking component 2.4.9 - Information Leak (Account enumeration) Exploit

Exploit Title: Joomla! combooking component 2.4.9 - Information Leak Account enumeration Google Dork: inurl:"index.php?option=combooking" Exploit Author: qw3rTyTy Vendor Homepage: http://www.artio.net/ Software Link: http://www.artio.net/downloads/joomla/book-it/book-it-2-free/download Version:...

WordPress WP Contact Slider Plugin <= 2.4.8 is vulnerable to Cross Site Scripting (XSS)

Software WP Contact Slider Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7425e4a52284 Credits Rafie Muhammad Patchstack...

ROS-2-1223

2.1223 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability Description: A corrective release of the OpenVPN 2.4.9 virtual private networking package has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2023-2036)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in beautifulsoup-scikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e35a9499d5b3efd34a3813328043f5f0132eef5cacc23f14dbaa2ba4e06ce43 The OpenSSF Package Analysis project identified 'beautifulsoup-scikit-learn' @ 2.4.9 pypi as malicious. It is considered malicious because: - Th...

SUSE CVE-2012-1133

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font...