PT-2023-4605 · Unknown · Tn-5900 Series

Name of the Vulnerable Software and Affected Versions: TN-5900 Series firmware versions prior to v3.3 Description: The issue stems from insufficient input validation and improper authentication in the certification-generation function. This could potentially allow malicious users to execute remot...

CVE-2023-39115

CVE-2023-39115 affects Campcodes Online Matrimonial Website System Script 3.3. the vulnerability is an arbitrary file upload via a crafted SVG, enabling code execution (SVG contains script and external navigation). Root cause: insufficient validation of uploaded SVG files. Affected component: ins...

CVE-2023-33561

Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords...

CVE-2023-33561

Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords...

CVE-2023-33560

There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...

PHPJabbers Time Slots Booking Calendar Cross Site Scripting Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Time Slots Booking Calendar v3.3, which stems from a cross-site scripting XSS vulnerability in the cid parameter of Preview.php...

PT-2023-24388 · Phpjabbers · Php Jabbers Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or...

PT-2023-24390 · Phpjabbers · Php Jabbers Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHPJabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability. This vulnerability is found in the theme parameter of the "preview.php" file. Recommendations: For PHPJabbers Ti...

PHPJabbers Time Slots Booking Calendar Security Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from incorrect validation of the input of the password parameter, resulting in an insecure password...

PT-2023-24387 · Phpjabbers · Php Jabbers Time Slots Booking Calendar

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to improper input validation of the password parameter, which results in insecure passwords. Recommendations: For version 3.3, ensure proper input validatio...

CVE-2023-33563

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

Dell Power Manager 安全漏洞

Dell Power Manager is an application from Dell Inc. that is used to configure battery maintenance practices to maximize the battery life of a system. A security vulnerability exists in Dell Power Manager versions 3.3 through 3.14 that stems from the presence of an Access Control Error...

WordPress Livemesh SiteOrigin Widgets Plugin < 3.3 is vulnerable to Cross Site Scripting (XSS)

Software Livemesh SiteOrigin Widgets Type Plugin Vulnerable versions 3.3 Fixed in 3.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a6f49c9df0d3 Credits Rafie Muhammad Patchstack...

Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A resource management error vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to state pointers after processing connection events, which could allow a...

CVE-2023-3336

TN-5900 Series (version 3.3 and earlier) is affected by a user enumeration vulnerability that could allow a remote attacker to determine whether a user is valid during password recovery via the web login page, potentially enabling brute-force attempts with valid accounts. Multiple sources (CVE-20...

PT-2023-3386 · Unknown · Tn-5900 Series

Name of the Vulnerable Software and Affected Versions: TN-5900 Series versions 3.3 and prior Description: The issue allows a remote attacker to determine whether a user is valid during password recovery through the web login page, potentially enabling a brute force attack with valid users. This i...