Siemens CP343-1 Devices Improper Verification of Source of a Communication Channel (CVE-2023-51440)

A vulnerability has been identified in SIMATIC CP 343-1 6GK7343-1EX30-0XE0 All versions, SIMATIC CP 343-1 Lean 6GK7343-1CX10-0XE0 All versions, SIPLUS NET CP 343-1 6AG1343-1EX30-7XE0 All versions, SIPLUS NET CP 343-1 Lean 6AG1343-1CX10-2XE0 All versions. Affected products incorrectly validate TCP...

CVE-2024-47297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

CVE-2024-47297

CVE-2024-47297 : WordPress CP Polls plugin versions up to 1.0.74 are vulnerable to a reflected XSS due to improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). Patch information from Patchstack indicates the vulnerability is fixed in CP Polls 1.0.75. Af...

WordPress plugin CP Polls 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2024-32507

Name of the Vulnerable Software and Affected Versions CodePeople CP Polls versions 1.0.74 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS. Recommendations For versions...

CVE-2024-47297: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through = 1.0.74...

CVE-2024-46261

cutepng v1.05 was discovered to contain a heap buffer overflow via the cpmake32 function at cutepng.h...

PT-2024-31937

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp make32 function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp make32 function as a temporary workaround until a patc...

PT-2024-31935

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp unfilter function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp unfilter function as a temporary workaround until a...

cute_png 缓冲区错误漏洞

cutepng is an application of cutepng open source. A buffer error vulnerability exists in cutepng version 1.05, which stems from a heap buffer overflow vulnerability contained in the cpunfilter function at cutepng.h. The vulnerability is caused by the use of the cpunfilter function...

PT-2024-31934

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description The issue is related to a heap buffer overflow in the cp load png mem function, located at cute png.h. This overflow can be triggered, potentially leading to unspecified consequences. Recommendations For cute...

PT-2024-31942 · Cute Png · Cute Png

Name of the Vulnerable Software and Affected Versions: cute png version 1.05 Description: A heap buffer overflow issue was discovered in the cp stored function at cute png.h. This issue can be exploited via the cp stored function. Recommendations: For cute png version 1.05, consider disabling the...

PT-2024-31939

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description The issue is related to a heap buffer overflow that can be triggered via the cp find function located at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp find function as a...

PT-2024-31940

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp block function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp block function as a temporary workaround until a patch ...

PT-2024-31943

Name of the Vulnerable Software and Affected Versions cute png version 1.05 Description A heap buffer overflow issue was discovered via the cp chunk function at cute png.h. Recommendations For cute png version 1.05, consider disabling the cp chunk function as a temporary workaround until a patch ...

WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin CP Polls versions = 1.0.74...

WordPress CP Polls Plugin <= 1.0.74 is vulnerable to Cross Site Scripting (XSS)

Software CP Polls Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47297 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd0fc6118ee8 Credits Muhamad Agil Fachrian Required...

PT-2024-29313 · Alibaba · Aliyuncontainerservice Pouch

Name of the Vulnerable Software and Affected Versions: AliyunContainerService pouch version 1.3.1 Description: A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch allows attackers to escalate privileges and write arbitrary files. Recommendations: For...

CVE-2024-41228: Improper Privilege Management

A symlink following vulnerability in the pouch cp function of AliyunContainerService pouch v1.3.1 allows attackers to escalate privileges and write arbitrary files...

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...