CVE-2024-20906

CVE-2024-20906 affects Oracle’s Integrated Lights Out Manager (ILOM) in the System Management component for versions 3–5. The flaw enables a highly privileged attacker with network access over ICMP to compromise ILOM, with attack success requiring user interaction and potentially affecting other ...

WordPress Plugin for Google Reviews Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Plugin for Google Reviews Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6884 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 934b6a9e0fb7 Credits Akbar Kustirama...

PT-2024-15626 · Unknown · Haokekeji Yiqiniu

Name of the Vulnerable Software and Affected Versions: HaoKeKeJi YiQiNiu versions up to 3.1 Description: A critical issue has been found in the software, affecting the function http post of the file /application/pay/controller/Api.php. The manipulation of the argument url leads to server-side...

Huaxia ERP Authorization Issues Vulnerability

Huaxia ERP is an ERP software from Huaxia, China. Huaxia ERP 3.1 and prior versions have an authorization issue vulnerability that originates from the file src/main/java/com/jsh/erp/controller/UserController.java that can lead to weak password recovery...

PT-2024-15608 · Unknown · Huaxia Erp

Name of the Vulnerable Software and Affected Versions: Huaxia ERP versions up to 3.1 Description: A problematic issue has been found in Huaxia ERP, affecting an unknown function of the file src/main/java/com/jsh/erp/controller/UserController.java. This issue leads to weak password recovery and ca...

OPENSUSE-SU-2024:0017-1 Security update for python-django-grappelli

This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks boo1216481 - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added impo...

CVE-2023-45169

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967...

CVE-2023-45173

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971...

CVE-2023-45171

CVE-2023-45171 (IBM AIX / VIOS) AIX 7.2, 7.3, and VIOS 3.1 are affected by a kernel vulnerability that allows a non-privileged local user to cause a denial of service. Connected Red Hat advisory confirms the same CVE with no additional exploit specifics or patch details in the provided sources. T...

CVE-2023-45173 IBM AIX denial of service

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971...

AIX 3.1 TL 3 : kernel (IJ49534)

https://vulners.com/cve/CVE-2023-45175 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial o...

AIX 3.1 TL 3 : kernel (IJ49533)

https://vulners.com/cve/CVE-2023-45175 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial o...

Security Bulletin: AIX is vulnerable to denial of service vulnerabilities

Summary UPDATED: Additional iFixes are now available for AIX 7.2 TL5 SP5, 7.3 TL0 SP2, 7.3 TL0 SP3, 7.3 TL1 SP1, and VIOS 3.1.3.21, 3.1.3.30, and 3.1.4.10. Both the original and new iFixes address the kernel security vulnerabilities mentioned in the bulletin, but the new iFixes also address the...

CVE-2023-52225

Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1...

AVA teaching video application service platform Cross-site scripting vulnerability

AVA Teaching Video Application Service Platform is a teaching video application service platform from China Aovia AVA. A cross-site scripting vulnerability exists in AVA teaching video application service platform version 3.1, which can be exploited by remote attackers to execute arbitrary code v...

WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

Software Taggbox Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52225 Patch priority High CVSS severity High 10 Developer Claim ownership PSID cec0f62daeea Credits Rafie Muhammad Patchstack Required privilege...

Fedora: Security Advisory for proftpd (FEDORA-2023-b87ec6cf47)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-31798 · Unknown · Rise Blocks

Name of the Vulnerable Software and Affected Versions: Rise Blocks – A Complete Gutenberg Page Builder versions 3.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actio...

CVE-2023-5432

The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Jquery news ticker Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software Jquery news ticker Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5432 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4f07a499a4a8 Credits István Márton Required...