366 matches found
PT-2023-27041 · D Link · D-Link Dir-816 A2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...
CVE-2023-3522
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...
CVE-2023-3522 SQLi in a2 License Portal System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...
CVE-2023-3522 SQLi in a2 License Portal System
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48...
CVE-2023-3522
CVE-2023-3522 is an SQL Injection vulnerability in the a2 License Portal System prior to version 1.48, caused by improper neutralization of special elements in SQL commands. Affected software: a2 License Portal System (before 1.48). Reported impact is severe (CVSS 3.1 base score 9.8; impact to co...
a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +333 more potentially affected by CVE-2023-4033 via mlflow (>=0.8.2 <=2.5.0)
mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-4033 Source advisory: OSV:PYSEC-2023-280...
WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF)
Software WebwinkelKeur Type Plugin Vulnerable versions = 3.24 Fixed in 3.25 OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-36691 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3b517566e749 Credits qilin99 Required...
WordPress LearnDash LMS Plugin <= 4.6.0 is vulnerable to Broken Authentication
Software LearnDash LMS Type Plugin Vulnerable versions = 4.6.0 Fixed in 4.6.0.1 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-3105 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID fcee4e28c7df Credits István Márton Required...
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the insufficient protection of registration data, allowing attackers to disclose the protected information.
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogramming software allows a attacker to execute arbitrary commands.
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
The vulnerability of the NTPSyncWithHost function in D-Link DIR-816 A2 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the NTPSyncWithHost function in D-Link DIR-816 A2 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
The vulnerability of the /goform/form2systime.cgi microprogramming software for D-Link DIR-816 A2 routers allows a hacker to execute arbitrary commands.
The vulnerability of the /goform/form2systime.cgi microprogramming system for D-Link DIR-816 A2 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the lack of authentication procedures. This allows attackers to circumvent existing security restrictions and download the configuration file.
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download the configuration file remotely...
The vulnerability of the /goform/formLogin component in the D-Link DIR-816 A2 microprogramming router software allows a hacker to execute arbitrary code.
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogrammed software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +321 more potentially affected by CVE-2023-2780 via mlflow (>=0.8.2 <=2.2.2)
mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-2780 Source advisory: OSV:GHSA-WJQ3-7JXX-WHJ9...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +143 more potentially affected by CVE-2023-30172 via mlflow (>=0.8.2 <=1.9.1)
mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =3.0.0, =0.1.0, =0.3.5, =0.8.0, =0.0.4, =0.0.7 and more Source cves: CVE-2023-30172 Source advisory: OSV:GHSA-WC6J-5G83-XFM6...
a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +318 more potentially affected by CVE-2023-1177 via mlflow (>=0.8.2 <=2.22.5)
mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-1177 Source advisory: OSV:GHSA-XG73-94FP-G449...
CVE-2023-23711
Cross-Site Request Forgery CSRF vulnerability in A2 Hosting A2 Optimized WP plugin = 3.0.4 versions...
