13405 matches found
CVE-2022-2275
The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack...
CVE-2022-2382
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...
CVE-2022-2382
The Product Slider for WooCommerce WordPress plugin before 2.5.7 has flawed CSRF checks and lack authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber to call them. One in particular could allow them to delete arbitrary blog options...
Denial of Service (DoS)
Overview node-opcua is an implementation of a OPC UA stack fully written in javascript and nodejs Affected versions of this package are vulnerable to Denial of Service DoS when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the...
WordPress plugin WP Coder 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Product Slider for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2022-16307 · WordPress · Wp Coder
Name of the Vulnerable Software and Affected Versions: WP Coder WordPress plugin versions prior to 2.5.3 Description: The issue is related to the lack of a CSRF check when deleting code created by the plugin. This could allow attackers to make a logged-in admin delete arbitrary code via a CSRF...
WordPress plugin WP Edit Menu 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2022-16283 · WordPress · Product Slider For Woocommerce
Name of the Vulnerable Software and Affected Versions: Product Slider for WooCommerce WordPress plugin versions prior to 2.5.7 Description: The issue concerns flawed CSRF checks and a lack of authorization in some AJAX actions of the plugin, allowing any authenticated users to call them. This cou...
Malicious code in loade3r-utisl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54ebd6173c9af5e59af744dcd824b62353b260aaf747020954cd2b4f2455b964 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-36727
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
CVE-2022-36727
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.2 due to a SQL injection in the bookId parameter of its...
GHSA-W3RC-2WHG-W934 Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...
Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists...
The vulnerability of the TeamPass password manager, related to security configuration errors, allows a hacker to delete any accessible file on the server.
The vulnerability of the TeamPass password manager is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to delete any accessible files on the server...
DEBIAN-CVE-2022-36146
SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new at asannewdelete.cpp...
CVE-2022-30264
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations. They utilize the ROC protocol 4000/TCP, 5000/TCP for communications between a master terminal and RTUs. Opcode 203 of this protocol allows a master terminal to transfer files to and from the...