9408 matches found
CVE-2023-50258
Summary (CVE-2023-50258): Medusa is an open-source video library manager. Versions prior to 1.0.19 are vulnerable to an unauthenticated blind server-side request forgery (SSRF) in the testDiscord handler. The issue stems from not validating the user-controlled discord_webhook variable and passing...
Automatic Renewal Of Expired Authorization Tokens
emailproxy is vulnerable to Automatic Renewal Of Expired Authorization Tokens. The vulnerability is due to expired authorization tokens can be automatically renewed without verifying their validity against the original account configuration, specifically the password set up during the initial...
CVE-2023-49180
CVE-2023-49180 corresponds to a Stored Cross-Site Scripting in the WordPress plugin Automatic Youtube Video Posts (versions up to 5.2.2). The vulnerability affects the plugin via admin/settings context, allowing authenticated attackers with Administrator+ privileges to inject scripts. Public expl...
WordPress Plugin Automatic Youtube Video Posts Plugin Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Microsoft Windows Defender Antimalware Platform DoS Vulnerability (Dec 2023)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 13-12-2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Security Bulletin: IBM Storage Insights is vulnerable to weaknesses related to Apache Commons Compress
Summary Vulnerability in Apache Commons Compress may affect IBM Storage Insights. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by improper input validation. By persuading a victim to open a specially crafted TAR file,...
CVE-2023-48429
A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 2. The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automaticall...
Design/Logic Flaw
A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 2. The REST API of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the API. The server will automatically...
CVE-2023-48429
A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 2. The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automaticall...
CVE-2023-48429
A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 2. The Web UI of affected devices does not check the length of parameters in certain conditions. This allows a malicious admin to crash the server by sending a crafted request to the server. The server will automaticall...
December 12, 2023—KB5033379 (OS Build 10240.20345) - EXPIRED
None None...
Keyboard language switching automatically on different applications inside the desktop ICA session
When switching between applications within the ICA desktop, the keyboard language is switched automatically...
Siemens SINEC INS 安全漏洞
SINEC INS Infrastructure Network Services is a web-based application that combines various network services in one tool. This simplifies the installation and management of all network services associated with industrial networks. A denial of service vulnerability exists in Siemens SINEC INS, whic...
The upload_compliance_result.xml file is not created immediately after enabling automatic upload
Uploadcomplianceresult.xml is not created immediately after enabling automatic upload...
Siemens Opcenter Quality 缓冲区错误漏洞
Opcenter Quality is a quality management system QMS that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system DCS. the SINUMERIK...
WordPress Automatic Youtube Video Posts Plugin Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Automatic Youtube Video Posts Plugin Type Plugin Vulnerable versions = 5.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-49180 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2f23eed8b8ab Credits...
Mars: Critical Unauthenticated Access to Sensitive Employee and Customer Data Including Invoice Details at ████
During a reconnaissance phase, a directory named 'SSO' was discovered on the website ████████. Upon accessing this directory, it redirected to ██████████, where sensitive employee and customer data, including usernames, emails, purchase history, payment history, bills, phone numbers, customer...
November 14, 2023—Hotpatch KB5032304 (OS Build 20348.2091)
None None...
