17 matches found
CVE-2026-32453
Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...
CVE-2026-32453
Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through 5.15.0...
CVE-2024-32453
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2024-32453
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
CVE-2024-32453
CVE-2024-32453 : Stored XSS in the POEditor WordPress plugin (
CVE-2024-32453 WordPress POEditor plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POEditor allows Stored XSS.This issue affects POEditor: from n/a through 0.9.8...
WordPress POEditor Plugin <= 0.9.8 is vulnerable to Cross Site Scripting (XSS)
Software POEditor Type Plugin Vulnerable versions = 0.9.8 Fixed in 0.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32453 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f8a43c0d4125 Credits Joshua Chan Required privilege Administrator...
CVE-2023-32453
creationtimestamp| type| source ---|---|--- 2023-08-17 00:36:44+00:00| seen| https://t.me/cibsecurity/68691...
CVE-2023-32453
Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit this vulnerability in order to modify a security-critical UEFI variable without knowledge of the BIOS administrator...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2022-32453
HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors...
CVE-2022-32453
CVE-2022-32453 affects Cybozu Office 10.0.0–10.8.5. The connected documents describe an HTTP header injection vulnerability in Cybozu Office that could allow a remote attacker to obtain and/or alter product data via unspecified vectors. The root cause is an HTTP header injection issue, and the im...
JVN#20573662: Multiple vulnerabilities in Cybozu Office
Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N| Base Score: 4....
CVE-2021-32453
CVE-2021-32453 affects SITEL CAP/PRX firmware version 5.2.01. The issue allows a local-network attacker to access the device’s internal configuration database via HTTP without authentication, enabling information disclosure about the device configuration. The connected documents Cornfirm the affe...
CVE-2021-32453
SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication. An attacker could exploit this vulnerability in order to obtain information about the device´s configurati...