ABB Cylon Aspect 4.00.00 (factorySaved.php) Unauthenticated XSS

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB Cylon Aspect BMS/BAS controller suffers from an unauthenticat...

phpMyFAQ 3.2.10 < 4.0.2 HTML Injection Vulnerability (GHSA-ww33-jppq-qfrp)

phpMyFAQ is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if...

CVE-2023-46637

Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Generate Dummy Posts: from n/a through 1.0.0...

PT-2025-1499 · Nofearinc · Dx Delete Attached Media

Name of the Vulnerable Software and Affected Versions: nofearinc DX Delete Attached Media versions 2.0.5.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in nofearinc DX Delete Attached Media, which allows exploiting incorrectly configured access control...

PT-2024-36696 · Webful Creations · Webful Creations Computer Repair Shop

Name of the Vulnerable Software and Affected Versions: Webful Creations Computer Repair Shop versions n/a through 3.8119 Description: A Missing Authorization vulnerability is present in Webful Creations Computer Repair Shop software, allowing Privilege Escalation. Recommendations: For versions n/...

PT-2025-3472 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the form fast setting wifi set function when processing the ssid parameter. This can allow a remote attacker to cause a denial of service or execute...

PT-2024-17014 · Filestack · Filestack Official Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Filestack Official plugin for WordPress versions up to, and including, 2.0.0 Description: The issue is related to Reflected Cross-Site Scripting via the fstab and filestack options parameters due to insufficient input sanitization and output...

PT-2024-11756 · 8 Degree Themes · 8Degree Themes Coming Soon Landing Page/Maintenance Mode Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin versions 2.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows for broken access control and the retrieval of...

WordPress plugin Pinpoint Booking System 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-36185 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Debian: Security Advisory (DSA-5829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-17464 · WordPress · Video & Photo Gallery For Ultimate Member

Name of the Vulnerable Software and Affected Versions: Video & Photo Gallery for Ultimate Member plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is related to Reflected Cross-Site Scripting via the page parameter due to insufficient input sanitization and output...

openSUSE Security Advisory (SUSE-SU-2024:4288-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Advisory - Ivanti Security Controls (ISeC) (CVE-2024-10251)

Security Advisory Ivanti Security Controls iSec CVE-2024-10251 Summary Ivanti has released an update for the Ivanti Security Controls console which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being...

Microsoft Office Multiple Vulnerabilities (Dec 2024) - Mac OS X

This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update November 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

cauuu (>=0.1.0 <=0.1.1), cosmwasm-check (>=1.1.0 <=1.3.4) +16 more potentially affected by unknown CVE via cosmwasm-vm (>=0.10.1 <=1.3.4)

cosmwasm-vm CARGO version =0.10.1, =0.1.0, =1.1.0, =0.13.2, =0.4.0, =0.4.0, =0.2.0, =0.4.0, =0.2.0, =0.2.1, =0.1.12, =0.1.13 - terra-math =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VMQH-5232-V43R...

December 2024 Security Advisory Ivanti Workspace Control (IWC) (CVE-2024-8496)

Summary Ivanti has released updates for Workspace Control which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...

CVE-2024-54223

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Contact Form - Repute InfoSystems ARForms Form Builder allows Code Injection.This issue affects ARForms Form Builder: from n/a through 1.7.1...

CVE-2024-52385

CVE-2024-52385 affects WordPress Plugin Team Member – Multi Language Supported Team Plugin, with a Local File Inclusion vulnerability in PHP Include/Require due to improper filename handling. Affected versions are reported as up to 7.3 (and up to 7.4 in Patchstack context); required privilege is ...

CVE-2023-25026

CVE-2023-25026 corresponds to the WordPress plugin PayPal Brasil para WooCommerce ≤ 1.4.2, affected by a Missing Authorization / Broken Access Control vulnerability. The issue stems from incorrectly configured access control levels, enabling potential exploitation of insufficient authorization fo...