758 matches found
CVE-2022-44312
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator...
CVE-2019-6018
Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier NetCommons3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...
WordPress plugin Save as Image Plugin by Pdfcrowd 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Owl Admin 安全漏洞
Owl Admin is a fast and flexible backend framework from Owl Admin. A security vulnerability exists in Owl Admin v3.2.2 through v4.10.2, which stems from an SQL injection in /admin-api/system/adminmenus/saveorder...
CVE-2025-32282
Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through = 3.2.3...
CVE-2025-32282
Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through = 3.2.3...
CVE-2025-32282
CVE-2025-32282 affects the ShareThis Dashboard for Google Analytics WordPress plugin. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Dashboard component, affecting versions from n/a through 3.2.2. The CVE entry lists a CVSS v3.1 base score of 4.3 (Medium) , with no confiden...
Linux Distros Unpatched Vulnerability : CVE-2014-9720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers...
Linux Distros Unpatched Vulnerability : CVE-2017-5601
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory...
WordPress Simple Image Sizes plugin <= 3.2.2- Authenticated (Admin+) Stored Cross-Site Scripting vulnerability
WordPress Simple Image Sizes plugin = 3.2.2- Authenticated Admin+ Stored Cross-Site Scripting vulnerability discovered by ier2317 in WordPress Plugin Simple Image Sizes versions = 3.2.2...
SUSE CVE-2023-5841
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...
XINJE XDPPro 安全漏洞
XINJE XDPPro is a USB port connection programming software using PLCs from China XINJE XINJE. A security vulnerability exists in XINJE XDPPro versions 3.2.2 through 3.7.17c, which originates from an insecure privilege in the XNetSocketClient component that allows an attacker to execute arbitrary...
WordPress plugin Inactive Logout 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...
CVE-2024-47359
Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Depicter Slider: from n/a through 3.2.2...
WordPress plugin Depicter Slider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2023-7286
The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.2.2. This makes it possible for attackers without the editusers capability to access metadata of other users, this includes contributor-level users and above...
WonderShare Yitu 安全漏洞
WonderShare Yitu Yitu is a one-stop office mapping tool from China-based WonderShare. A security vulnerability exists in WonderShare Yitu version 3.2.2, which can be exploited to execute arbitrary code via the platformpluginpath parameter...
CVE-2024-47381
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Averta Depicter Slider allows Stored XSS.This issue affects Depicter Slider: from n/a through 3.2.2...
WordPress plugin Depicter Slider 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...