1490 matches found
CVE-2023-44173
Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...
CVE-2023-44174 Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)
Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability...
Projectworlds Online Movie Ticket Booking System Cross-Site Scripting Vulnerability
Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a cross-site scripting vulnerability that stems from susceptibility to an authenticated stored cross-site scriptin...
ZOHO ManageEngine Asset Management System SQL Injection Vulnerability
ZOHO ManageEngine Asset Management System is an asset management solution from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Asset Management System v1.0, which stems from vulnerability to an authenticated SQL injection vulnerability that could allow an authenticated attacker to...
Movie Ticket Booking System Cross-Site Scripting Vulnerability
Movie Ticket Booking System is a movie ticket booking system by the individual developer Aman sharma. A cross-site scripting vulnerability exists in Online Movie Ticket Booking System v1.0, which stems from vulnerability to an authenticated, reflective cross-site scripting vulnerability...
CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...
WordPress plugin Duplicate Post Page Menu & Custom Post Type security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
Cacti Cross-Site Scripting Vulnerability
Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that originates fro...
PT-2023-26460 · WordPress · Suitedash Direct Login
Name of the Vulnerable Software and Affected Versions: SuiteDash Direct Login plugin versions = 1.7.6 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into...
CVE-2023-32746
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in WooCommerce WooCommerce Brands plugin = 1.6.45 versions...
CVE-2023-37434 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestrator instance. An attacker could exploit these vulnerabilities to obtain and...
PT-2023-23249 · Creativemindssolutions · Cm On Demand Search/Replace
Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM On Demand Search And Replace plugin versions prior to 1.3.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can...
PT-2023-21907 · Marco Steinbrecher · Wp Browserupdate
Name of the Vulnerable Software and Affected Versions: Marco Steinbrecher WP BrowserUpdate plugin versions = 4.5 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scripts int...
Checkmk Injection Vulnerability
Checkmk is an editor. Checkmk suffers from a security vulnerability that stems from a security issue with the parameter ctive check command, which allows an authenticated attacker to execute arbitrary commands...
PT-2023-25940 · WordPress · Sudipto Pratap Mahato Simple Light Weight Social Share
Name of the Vulnerable Software and Affected Versions: Sudipto Pratap Mahato Simple Light Weight Social Share plugin versions = 2.0 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject...
PT-2023-25820 · Aruba · Aos-Cx
Name of the Vulnerable Software and Affected Versions: AOS-CX affected versions not specified Description: An authenticated command injection issue exists in the command line interface, allowing successful exploitation to execute arbitrary commands on the underlying operating system as a privileg...
CVE-2023-3983
An authenticated SQL injection vulnerability exists in Advantech iView versions prior to v5.7.4 build 6752. An authenticated remote attacker can bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection to perform blind SQL injection...
CVE-2023-29436
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Flyn San IFrame Shortcode plugin = 1.0.5 versions...
