AT Software Solutions ATSVD 注入漏洞

AT Software Solutions ATSVD is an application from AT Software Solutions, Brazil. An injection vulnerability exists in AT Software Solutions ATSVD version 3.4.1 and prior versions. An attacker can exploit the vulnerability to remotely execute code...

PT-2025-6551 · WordPress · Ltl Freight Quotes – For Customers Of Fedex Freight

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress versions up to, and including, 3.4.1 Description: The issue concerns a SQL injection vulnerability via the edit id and dropship edit id parameters. This vulnerability is...

PT-2025-6101 · Unknown · Xxyopen Novel

Name of the Vulnerable Software and Affected Versions: xxyopen Novel versions up to 3.4.1 Description: A critical issue has been found in the software, affecting some unknown functionality of the file "/api/front/search/books". The manipulation of the sort argument leads to SQL injection. The...

CVE-2025-23628

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NewMediaOne GeoDigs geodigs allows Reflected XSS.This issue affects GeoDigs: from n/a through = 3.4.1...

WordPress plugin GeoDigs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4986 · New Media One · New Media One Geodigs

Name of the Vulnerable Software and Affected Versions: New Media One GeoDigs versions prior to 3.4.1 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious script...

WordPress GeoDigs plugin <= 3.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin GeoDigs versions = 3.4.1...

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12087 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

AZL-55664 CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

AZL-55679 CVE-2024-12747 affecting package rsync for versions less than 3.4.1-1

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass...

AZL-55676 CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1

A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the...

CVE-2022-36049 affecting package helm 3.4.1-17

CVE-2022-36049 affecting package helm 3.4.1-17. No patch is available currently...

PT-2025-1484 · WordPress · Wp Job Openings

Name of the Vulnerable Software and Affected Versions: WP Job Openings versions 3.4.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP Job Openings, which allows exploiting incorrectly configured access control security levels. Recommendations: For WP J...

CVE-2024-56206

CVE-2024-56206 is a CSRF vulnerability in gap-hub-user-role (WordPress plugin) that allows authentication bypass. Affected: gap-hub-user-role from n/a through 3.4.1. The connected records indicate this CVE as an active issue with patch status reported as Unpatched for the specific entry, and CVSS...

WordPress plugin gap-hub-user-role 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2024-36741 · Amarjeet Amar · Gap-Hub-User-Role

Name of the Vulnerable Software and Affected Versions: Amarjeet Amar gap-hub-user-role versions 3.4.1 and earlier Description: A Cross-Site Request Forgery CSRF issue exists in Amarjeet Amar, allowing Authentication Bypass. Recommendations: For versions 3.4.1 and earlier, as a temporary workaroun...

CVE-2024-38647

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647

CVE-2024-38647 affects QNAP AI Core. It is described as an exposure of sensitive information vulnerability that could allow remote attackers to compromise system security. The issue is fixed in QNAP AI Core 3.4.1 and later. Reported CVSS metrics indicate high severity (CVSS 3.1: High, network att...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

QNAP Systems AI Core 安全漏洞

QNAP Systems AI Core is an artificial intelligence core software from China Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems AI Core prior to version 3.4.1, which stems from the inclusion of a sensitive information disclosure vulnerability...