6162 matches found
KB5029304: Windows Server 2012 R2 Security Update (August 2023)
The remote Windows host is missing security update 5029304. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
KB5029308: Windows Server 2012 Security Update (August 2023)
The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities - Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35385, CVE-2023-36910, CVE-2023-36911 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...
Exploit for Cross-site Scripting in Ninjaforms Ninja_Forms
CVE-2023-37979 Exploit !Python Versionhttps://img.shields...
CVE-2023-38684: Allocation of Resources Without Limits or Throttling
Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, in multiple controller actions, Discourse accepts limit params but does not impose any upper bound on the values being accepted. Without an...
Security Updates for Microsoft SQL Server OLE DB Driver (June 2023)
The Microsoft SQL Server driver installation on the remote host is missing a security update. It is, therefore, affected by remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...
Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. 1. Ensure Contact Form 7 is installed, along with this plugin 2. Visit Contact Ultimat...
WordPress Contact Form DB Divi Plugin < 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form DB Divi Type Plugin Vulnerable versions 1.2 Fixed in 1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7b57e95fddc1 Credits Rafie Muhammad Patchstack Require...
DEBIAN-CVE-2023-36813
Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and update operations, the code improperly...
WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
Software Contact Form to DB by BestWebSoft Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-36508 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID d7318d25ca7b Credits LEE SE HYOUNG hackintoanetwork...
file:magic_fuzzer_loaddb: Crash in regcomp
Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=6499330727739392 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasani386file Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5caf57f0 Crash State:...
CVE-2023-2779
creationtimestamp| type| source ---|---|--- 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51534...
PT-2023-6539 · Nocodb · Nocodb
Name of the Vulnerable Software and Affected Versions: NocoDB versions 0.106.0 and earlier NocoDB version 0.109.1 Description: The issue is related to a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on the server by manipulating the path parameter ...
CVE-2023-32028
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
CVE-2023-32028
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
CVE-2023-29349
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft SQL OLE DB Remote Code Execution Vulnerability...
Remote code execution
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...
CVE-2023-29349
CVE-2023-29349 concerns Microsoft ODBC and OLE DB components (SQL Server ODBC Driver and OLE DB Driver) enabling remote code execution. The vulnerability arises from improper handling in the ODBC/OLE DB stack, with an attack vector described as LOCAL and requiring user interaction, resulting in h...
