SQL Injection

Overview pimcore/customer-management-framework-bundle is a Customer Management Framework for management of customer data within Pimcore. Affected versions of this package are vulnerable to SQL Injection via the filterDefinition or filter parameter at the...

PT-2025-1724 · Pimcore · Pimcore/Customer-Data-Framework

Name of the Vulnerable Software and Affected Versions: Pimcore customer-data-framework versions 4.2.0 and earlier Description: A critical issue has been found in Pimcore customer-data-framework, affecting some unknown functionality of the file "/admin/customermanagementframework/customers/list"...

Wireshark 3.6.x < 3.6.20, 4.0.x < 4.0.12, 4.2.0 Multiple Vulnerabilities (Jan 2025) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

CVE-2020-13712

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

CVE-2020-13712

The CVE-2020-13712 issue affects Sierra Wireless MGOS/Omg2000 devices: oMG2000 version 3.15.1 and earlier, and MG90 version 4.2.1 and earlier. A command injection via the user interface allows arbitrary command execution as root. Root-cause and impact are described across CVE records; affected co...

CVE-2020-13712 MGOS Command Injection

A command injection is possible through the user interface, allowing arbitrary command execution as the root user. oMG2000 running MGOS 3.15.1 or earlier is affected. MG90 running MGOS 4.2.1 or earlier is affected...

PT-2024-10780 · Omg2000 +1 · Omg2000 +1

Name of the Vulnerable Software and Affected Versions: oMG2000 versions 3.15.1 and earlier MG90 versions 4.2.1 and earlier Description: A command injection is possible through the user interface, allowing arbitrary command execution as the root user. Recommendations: For oMG2000 versions 3.15.1 a...

python-libarchive Python Library <= 4.2.1 Directory Traversal (CVE-2024-55587)

The version of the python-libarchive Python library that is installed on the remote host is 4.2.1 or prior. It is, therefore, affected by a directory traversal vulnerability. python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and...

PT-2024-33694 · Ibm · Ibm Security Guardium Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Key Lifecycle Manager versions 4.1 through 4.2.1 Description: The issue concerns the storage of user credentials in configuration files by IBM Security Guardium Key Lifecycle Manager. These credentials can be accessed by...

PT-2024-33696 · Ibm · Ibm Security Guardium Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Key Lifecycle Manager versions 4.1, 4.1.1, 4.2.0, and 4.2.1 Description: The issue allows a remote attacker to obtain sensitive information in cleartext in a communication channel that can be detected by unauthorized...

WordPress plugin Primer MyData for Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

python-libarchive directory traversal

python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...

python-libarchive 安全漏洞

python-libarchive is a Libarchive wrapper for Python open-sourced by SmartFile. A security vulnerability exists in python-libarchive version 4.2.1, which stems from allowing directory traversal of ZipFile.extractall and ZipFile.extract in a zip.py extraction...

PT-2024-36562

Name of the Vulnerable Software and Affected Versions python-libarchive versions 4.2.1 and earlier Description The issue allows directory traversal, enabling the creation of files in extract in zip.py for ZipFile.extractall and ZipFile.extract functions. This can be exploited to create files...

PT-2024-13489 · Miniorange · Miniorange Otp Verification

Name of the Vulnerable Software and Affected Versions: miniorange otp verification versions n/a through 4.2.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels. Recommendations: For...

WordPress plugin Save as PDF Plugin by Pdfcrowd 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress Save as PDF plugin by Pdfcrowd Plugin <= 4.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Save as PDF plugin by Pdfcrowd Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10891 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bc2c8b0bae5b Credits Peter...

CVE-2024-10437

The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to unauthorized Smar Message activation/deactivation due to a missing capability check on the ajaxenable function in all versions up to, and including, 4.2.1. This makes it possible for authenticated attackers, with...

WordPress plugin WPC Smart Messages for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Malicious code in @linx-ui/pharmacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...