19 matches found
CVE-2025-9321
creationtimestamp| type| source ---|---|--- 2025-09-23 07:32:23+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzifrwrgkv2o...
CVE-2025-9321
CVE-2025-9321 (WPCasa for WordPress) The WPCasa plugin (WordPress) up to version 1.4.1 is affected by unauthenticated Code Injection due to insufficient input validation in the api_requests function, enabling attackers to call arbitrary functions and execute code. The issue is rated CRITICAL (CVS...
CVE-2025-9321 WPCasa <= 1.4.1 - Unauthenticated Code Injection
The WPCasa plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.4.1. This is due to insufficient input validation and restriction on the 'apirequests' function. This makes it possible for unauthenticated attackers to call arbitrary functions and execute cod...
CVE-2020-9321
configurationwatcher.go in Traefik 2.x before 2.1.4 and TraefikEE 2.0.0 mishandles the purging of certificate contents from providers before logging...
CVE-2019-9321
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111208713...
CVE-2015-9321
The shortcode-factory plugin before 1.1.1 for WordPress has XSS via addqueryarg...
CVE-2024-9321
creationtimestamp| type| source ---|---|--- 2024-09-29 03:51:38+00:00| seen| https://t.me/cvedetector/6618...
CVE-2024-9321 SourceCodester Online Railway Reservation System view_details.php access control
A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...
CVE-2024-9321 SourceCodester Online Railway Reservation System view_details.php access control
A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewdetails.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated...
GHSA-W9FG-XFFH-P362 Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches The issue is fixed by 9321. Workarounds Depending on the needs and configuration of the homeserver...
CVE-2020-9321
The CVE-2020-9321 issue affects Traefik 2.x (before 2.1.4) and TraefikEE 2.0.0, where configurationwatcher.go mishandles purging of certificate contents from providers before logging. This can lead to information disclosure of certificate data because sensitive material may be logged. Exploitatio...
CVE-2019-9321
In libavc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111208713...
CVE-2019-9321
CVE-2019-9321 affects the Android 10 stack via the libavc library, where a missing variable initialization in libavc could allow information disclosure. The vulnerability reportedly requires user interaction to be exploited and would impact confidentiality (partial). The connected Red Hat entry a...
CVE-2015-9321
creationtimestamp| type| source ---|---|--- 2019-08-21 16:28:53+00:00| seen| https://t.me/cibsecurity/6256...
CVE-2015-9321
The CVE-2015-9321 entry applies to the WordPress Shortcode Factory plugin prior to 1.1.1, where an XSS vulnerability is triggered via add_query_arg. The affected component is the shortcode-factory plugin in WordPress; the underlying issue is a cross-site scripting flaw that could enable client-si...
CVE-2017-9321
CVE-2017-9321 is rejected/not used and does not represent an active vulnerability entry.