WordPress All-in-One WP Migration plugin <= 7.62 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by Team ISH Tecnologia in WordPress All-in-One WP Migration plugin versions = 7.62. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.63...

PT-2022-4635 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server All Versions Description: The issue is related to a use-after-free condition when processing a specific project file, which can allow an attacker to execute arbitrary code remotely. This is associated with the...

The vulnerability of the `std::fs::remove_dir_all` function in the Rust programming language allows a malicious actor to delete any system files and directories they desire.

The vulnerability of the std::fs::removedirall function in the Rust programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability could allow an attacker to delete arbitrary system files and directories...

Intel Datacenter Group Event 代码问题漏洞

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in all versions of the Intel Datacenter Group Event Android application. An attacker exploited the vulnerability to escalate privileges...

aalborgstift.dk Cross Site Scripting vulnerability OBB-2841857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Emerson ControlWave 数据伪造问题漏洞

Emerson ControlWave is a highly programmable controller from Emerson Electric U.S. that combines the unique capabilities of a Programmable Logic Controller PLC and a Remote Terminal Unit RTU into a hybrid controller. A data forgery vulnerability exists in all versions of Emerson ControlWave, whic...

WordPress Export All URLs plugin <= 4.3 - Authenticated Arbitrary System File Removal vulnerability

Authenticated Arbitrary System File Removal vulnerability discovered by Raad Haddad in WordPress Export All URLs plugin versions = 4.3. Solution Update the WordPress Export All URLs plugin to the latest available version at least 4.4...

UBUNTU-CVE-2020-1754

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2020-1754

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2020-1754: Improper Access Control

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...

CVE-2022-27535: Undefined Security Weakness

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

Kaspersky VPN Secure Connection 安全漏洞

Kaspersky VPN Secure Connection is a Vpn client software from the Russian company Kaspersky. The software checks the security of the network. If the Wi-Fi network is not secure, Kaspersky VPN Secure Connection prompts you to enable a secure connection by connecting to a specially assigned server...

GHSA-32FW-9WQ8-9X9C node-latex-pdf is susceptible to command injection

A command injection vulnerability affects all versions of the package node-latex-pdf...

GHSA-CQFC-9452-R36J curljs Command Injection vulnerability

A command injection vulnerability affects all versions of the package curljs...

GHSA-5VRC-7JFR-4642 monorepo-build Command Injection vulnerability

A command injection vulnerability affects all versions of package monorepo-build...

CVE-2020-28423

This affects all versions of package monorepo-build...

Code injection

This affects all versions of package node-latex-pdf...

curljs 命令注入漏洞

curljs is a Node.js library that wraps curl functionality. A command injection vulnerability exists in all versions of curljs, which stems from the presence of command injection...

npos-ocr 命令注入漏洞

npos-ocr is an OCR tool for npos that uses the tesseract engine. A command injection vulnerability exists in all versions of npos-ocr, which stems from the presence of command injection...

monorepo 命令注入漏洞

monorepo is a movie homepage source repository from cinematic open source. A command injection vulnerability exists in all versions of monorepo-build, which stems from the presence of command injection...