CVE-2023-29643

PerfreeBlog 3.1.2 is affected by a Cross Site Scripting (XSS) vulnerability that allows arbitrary code execution via the Post function. The CVE records indicate an impact at low confidentiality and integrity, no availability impact, with CVSS v3.1 base score 5.4 (Network attack vector, low attack...

PT-2023-22351 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 3.1.2 Description: The issue is a Cross Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via the Post function. This enables attackers to potentially inject malicious scripts into the websit...

CVE-2023-29643

Cross Site Scripting XSS vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function...

PerfreeBlog 跨站脚本漏洞

PerfreeBlog is a java-based blog/CMS builder. A security vulnerability exists in PerfreeBlog version 3.1.2, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary code via the Post function...

GHSA-3JXW-CV35-2MMV Apache DolphinScheduler's python gateway suffered from improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

CVE-2023-25601 Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

CVE-2023-25601 Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

PT-2023-20191 · Apache · Apache Dolphinscheduler

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions 3.0.0 through 3.1.1 Description: The issue concerns improper authentication in Apache DolphinScheduler's python gateway, allowing an attacker to use a socket bytes attack without authentication. This has been...

CVE-2022-41831

Auth. contributor+ Cross-Site Scripting vulnerability in TCBarrett WP Glossary plugin = 3.1.2 versions...

WordPress Plugin TCBarrett WP Glossary 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-40699

Cross-Site Scripting XSS vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin = 3.1.2 versions...

WordPress plugin Yet Another Stars Rating 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

agent-memory-layer (>=0.1.0 <=0.1.1), astonish (>=0.12.2 <=0.12.5) +3 more potentially affected by CVE-2023-25617 via sap-ai-sdk-base (>=3.1.2 <=3.4.0)

sap-ai-sdk-base PYPI version =3.1.2, =0.1.0, =0.12.2, =1.0.25122300, =3.0.3, =5.3.4, =6.10.0 Source cves: CVE-2023-25617 Source advisory: OSV:PYSEC-2023-315...

CVE-2023-0084

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-26091

The frpformanswers aka Forms Export extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in TYPO3 versions prior to 3.1.2 and 4.x versions prior to 4.0.2, which stems from allowing XSS attacks via saved emails...

PT-2023-20480 · Unknown · Frp Form Answers

Name of the Vulnerable Software and Affected Versions: frp form answers extension versions prior to 3.1.2 frp form answers extension versions 4.x prior to 4.0.2 Description: The issue allows XSS via saved emails. Recommendations: For frp form answers extension versions prior to 3.1.2, update to...

K33828251: Apache Spark vulnerability CVE-2022-33891

Security Advisory Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

SUSE CVE-2003-0459

KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites...

SUSE CVE-2005-0706

Buffer overflow in discdb.c for grip 3.1.2 allows attackers to cause a denial of service crash and possibly execute arbitrary code by causing the cddb lookup to return more matches than expected...