CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template is affected by a Server-Side Template Injection (SSTI) via the keyword parameter. The NVD entry for CVE-2023-36210 reports a high-severity vulnerability with CVSS v3.1 base score 9.8 (Attack Vector: Network, Privileges Required: None, User Interaction...

Nuxt.js 3.4.x < 3.4.3 Remote Code Execution

Nuxt.js framework versions 3.4.x before 3.4.3 suffer from a Remote Code Execution when running in development mode through the test-component-wrapper component. No source data...

nuxt Code Injection vulnerability

he Nuxt dev server between versions 3.4.0 and 3.4.3 is vulnerable to code injection when it is exposed publicly...

PT-2023-23680 · Nuxt · Nuxt

Name of the Vulnerable Software and Affected Versions: nuxt versions prior to 3.5.3 nuxt versions 3.4.0 through 3.4.3 Description: The issue concerns code injection in the Nuxt dev server. When the dev server is exposed publicly, it is vulnerable to code injection. This affects versions of nuxt...

MotoCMS Version 3.4.3 - SQL Injection Vulnerability

Title: MotoCMS Version 3.4.3 - SQL Injection Author: tmrswrr Date: 01/06/2023 Vendor: https://www.motocms.com Link: https://www.motocms.com/website-templates/demo/189526.html Vulnerable Versions: MotoCMS 3.4.3 Description MotoCMS Version 3.4.3 SQL Injection via the keyword parameter. Steps to...

CVE-2022-47525

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

CVE-2022-47525

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

MotoCMS Version 3.4.3 - Server-Side Template Injection (SSTI)

Title: MotoCMS Version 3.4.3 - Server-Side Template Injection SSTI Author: tmrswrr Date: 31/05/2023 Vendor: https://www.motocms.com Link: https://www.motocms.com/website-templates/demo/189526.html Vulnerable Versions: MotoCMS 3.0.27 Description MotoCMS Version 3.4.3 Store Category Template was...

CVE-2022-47525

Fox-IT DataDiode aka Fox DataDiode 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction...

PT-2023-15386 · Foxit · Fox-It Datadiode

Name of the Vulnerable Software and Affected Versions: Fox-IT DataDiode aka Fox DataDiode version 3.4.3 Description: The issue is a Divide-by-Zero vulnerability in the packet parser, which can be exploited by a remote attacker to cause a denial-of-service. This exploitation does not require any...

PT-2023-15387 · Foxit · Fox-It Datadiode

Name of the Vulnerable Software and Affected Versions: Fox-IT DataDiode aka Fox DataDiode version 3.4.3 Description: The issue is a path traversal vulnerability that allows for arbitrary writing of files. A remote attacker could exploit this to achieve arbitrary code execution in the context of t...

CVE-2022-47526

Fox-IT DataDiode (Fox DataDiode) v3.4.3 exposes a path-traversal vulnerability allowing arbitrary file writes and remote code execution in the downstream node user context. Exploitation requires no user interaction and can be achieved over the network with no privileges. Several connected sources...

Fox-IT DataDiode 路径遍历漏洞

Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker can exploit the vulnerability to execute...

Fox-IT DataDiode 数字错误漏洞

Fox-IT DataDiode Fox DataDiode is an IT security product from Fox-IT. It guarantees unidirectional data transfer in real time over fast 1-10Gbps data connections. A security vulnerability exists in Fox-IT DataDiode Fox DataDiode version 3.4.3. An attacker could exploit this vulnerability to cause...

CVE-2023-23813

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.4.3 versions...

CVE-2023-23813

Cross-Site Request Forgery CSRF vulnerability in Joseph C Dolson My Calendar plugin = 3.4.3 versions...

WordPress plugin My Calendar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

SUSE CVE-2017-15571

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/list.html.erb via crafted column data...

Vulnerability fixed in Dell Repository Manager

Dell has fixed a vulnerability in Repository Manager. A local malicious person could exploit the vulnerability to execute arbitrary code on the underlying operating system. The vulnerability can be exploited during the installation of systems. Dell has released updates to fix the vulnerability in...