32250 matches found
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection
Description The Sitepact's Contact Form 7 Extension For Klaviyo plugin for WordPress is vulnerable to SQL Injection parameter in versions up to, and including, 1.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...
CentOS 7 : java-1.8.0-ibm (RHSA-2024:0879)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0879 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affect...
PT-2024-2258 · Unknown · Trace Mode 7
Name of the Vulnerable Software and Affected Versions: TRACE MODE 7 affected versions not specified Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue could allow an attacker to gain unauthorized access to protect...
WordPress Sitepact's Contact Form 7 Extension For Klaviyo Plugin <= 1.0.5 is vulnerable to SQL Injection
Software Sitepact's Contact Form 7 Extension For Klaviyo Type Plugin Vulnerable versions = 1.0.5 Fixed in 3.0.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-25928 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b1255b55a5c6 Credits Dimas Maula...
Oracle Linux 7 : openssh (ELSA-2024-12158)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12158 advisory. 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445 Tenable has extracted the preceding...
Oracle Linux 7 : openssh (ELSA-2024-12157)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12157 advisory. 7.4p1-23.0.3 - add KEXINITIAL flag Orabug: 36160445 - implement 'strict key exchange' CVE-2023-48795Orabug: 36160445 Tenable has extracted the preceding...
CVE-2021-46757
creationtimestamp| type| source ---|---|--- 2024-02-13 21:31:46+00:00| seen| https://t.me/ctinow/184227 2025-05-07 21:22:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15427...
GHSA-68W7-72JG-6QPP vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-68W7-72JG-6QPP vulnerabilities
Vulnerabilities for packages: dotnet...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7
New Red Hat Single Sign-On 7.6.7 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Design/Logic Flaw
A vulnerability has been identified in OpenPCS 7 V9.1 All versions, SIMATIC BATCH V9.1 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Route Control V9.1 All versions, SIMATIC WinCC Runtime Professional V18 All versions, SIMATIC WinCC Runtime Professional V19 All versions, SIMATIC WinCC V7...
Design/Logic Flaw
A vulnerability has been identified in OpenPCS 7 V9.1 All versions, SIMATIC BATCH V9.1 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC Route Control V9.1 All versions, SIMATIC WinCC Runtime Professional V18 All versions, SIMATIC WinCC Runtime Professional V19 All versions, SIMATIC WinCC V7...
CVE-2023-48364
Siemens CVE-2023-48364 affects multiple OpenPCS/WinCC/PCS7/Route Control products (OpenPCS 7, SIMATIC BATCH, PCS 7, Route Control, WinCC Runtime Professional V18/V19, WinCC V7.4/7.5/8.0) and is caused by improper handling of certain malformed RPC messages, leading to a denial-of-service condition...
CVE-2023-48364
A vulnerability has been identified in OpenPCS 7 V9.1 All versions V9.1 SP2 UC05, SIMATIC BATCH V9.1 All versions V9.1 SP2 UC05, SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC05, SIMATIC Route Control V9.1 All versions V9.1 SP2 UC05, SIMATIC WinCC Runtime Professional V18 All versions V18 Update 4,...
CVE-2023-48363
A vulnerability has been identified in OpenPCS 7 V9.1 All versions V9.1 SP2 UC05, SIMATIC BATCH V9.1 All versions V9.1 SP2 UC05, SIMATIC PCS 7 V9.1 All versions V9.1 SP2 UC05, SIMATIC Route Control V9.1 All versions V9.1 SP2 UC05, SIMATIC WinCC Runtime Professional V18 All versions V18 Update 4,...
CVE-2023-48363
CVE-2023-48363 affects Siemens OpenPCS 7, SIMATIC BATCH/PCS 7, Route Control, WinCC Runtime Professional V18/V19, WinCC V7.4/V7.5/V8.0. Root cause: improper handling of certain unorganized RPC messages in the RPC server, leading to a denial-of-service. Affected versions include OpenPCS 7 V9.1 and...
February 13, 2024—KB5034809 (Security-only update)
None None...
February 13, 2024—KB5034831 (Monthly Rollup)
None None...
RHEL 7 : Red Hat Single Sign-On 7.6.7 security update on RHEL 7 (Important) (RHSA-2024:0798)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0798 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...
