16 matches found
CVE-2026-32453
Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...
CVE-2026-32453
Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...
CVE-2024-32453
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2024-32453
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
CVE-2024-32453
CVE-2024-32453 : Stored XSS in the POEditor WordPress plugin (
CVE-2024-32453 WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
WordPress POEditor Plugin <= 0.9.8 is vulnerable to Cross Site Scripting (XSS)
Software POEditor Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32453 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f8a43c0d4125 Credits Joshua Chan Required privilege Administrator...
CVE-2023-32453
creationtimestamp| type| source ---|---|--- 2023-08-17 00:36:44+00:00| seen| https://t.me/cibsecurity/68691...
CVE-2023-32453
Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2022-32453
CVE-2022-32453 affects Cybozu Office 10.0.0–10.8.5. The connected documents describe an HTTP header injection vulnerability in Cybozu Office that could allow a remote attacker to obtain and/or alter product data via unspecified vectors. The root cause is an HTTP header injection issue, and the im...
JVN#20573662: Multiple vulnerabilities in Cybozu Office
Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N| Base Score: 4....
CVE-2021-32453
CVE-2021-32453 affects SITEL CAP/PRX firmware version 5.2.01. The issue allows a local-network attacker to access the device’s internal configuration database via HTTP without authentication, enabling information disclosure about the device configuration. The connected documents Cornfirm the affe...
CVE-2008-6164
creationtimestamp| type| source ---|---|--- 2008-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32453...