Design/Logic Flaw

An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02...

Design/Logic Flaw

A use-after-free exists in Python through 3.9 via heappushpop in heapq...

Design/Logic Flaw

dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox function in dpic.y...

Design/Logic Flaw

An issue was discovered in function libssh2packetadd in libssh2 1.10.0 allows attackers to access out of bounds memory...

Design/Logic Flaw

A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgaconinvertregion function...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Design/Logic Flaw

A stack-use-after-scope issue discovered in expandmmacparams function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file...

Design/Logic Flaw

A Use After Free vulnerability in function newToken in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command...

Design/Logic Flaw

A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

Design/Logic Flaw

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature...

Design/Logic Flaw

The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered...

Design/Logic Flaw

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function...

Design/Logic Flaw

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor component...

WordPress DoLogin Security Plugin <= 3.6 is vulnerable to Bypass Vulnerability

Software DoLogin Security Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e4651ef4e7a2 Credits WordFence Required privilege Unauthenticated...

Design/Logic Flaw

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...

Design/Logic Flaw

lrzip-next LZMA v23.01 was discovered to contain an access violation via the component /bz3decodeblock src/libbz3.c...

CVE-2023-30874

CVE-2023-30874 corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress GPS Plotter plugin by St. Pete Design, affecting versions

Design/Logic Flaw

Missing Encryption of Sensitive Data vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Man in the Middle Attack.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42...

CVE-2023-30874: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin = 5.1.4 versions...

Design/Logic Flaw

Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to...