[SECURITY] Fedora 40 Update: python-jinja2-3.1.5-1.fc40

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

CVE-2024-54795

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting XSS vulnerabilities in the create/edit forms of the worksheet designer function...

CVE-2024-54795

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting XSS vulnerabilities in the create/edit forms of the worksheet designer function...

CVE-2024-51818

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

CVE-2024-51919

Unrestricted Upload of File with Dangerous Type vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

CVE-2024-51818

CVE-2024-51818 describes an unauthenticated SQL injection in the WordPress plugin Fancy Product Designer (NotFound Fancy Product Designer) up to version 6.4.3. The root cause is improper neutralization/escaping of special elements used in SQL commands, enabling an attacker to manipulate queries a...

CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

CVE-2024-51919

CVE-2024-51919 : WordPress/Fancy Product Designer plugin vulnerable to Unrestricted Upload of File with Dangerous Type (Unauthenticated Arbitrary File Upload) affecting versions n/a through 6.4.3. The issue, scored CVSS v3.1 9.0 (CRITICAL) with network attack vector, high complexity, and no privi...

CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3...

WordPress plugin Fancy Product Designer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

CVE-2024-54795

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting XSS vulnerabilities in the create/edit forms of the worksheet designer function...

CVE-2024-54795

Engineering Ingegneria Informatica SpagoBI version 3.5.1 and earlier are affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities within the create/edit forms of the worksheet designer function. An attacker with sufficient permissions to access the worksheet designer can inject mali...

CVE-2024-54795

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting XSS vulnerabilities in the create/edit forms of the worksheet designer function...

PT-2025-3073

Name of the Vulnerable Software and Affected Versions SpagoBI version 3.5.1 Description The issue concerns multiple Stored Cross-Site Scripting XSS vulnerabilities found in the create/edit forms of the worksheet designer function. This allows for the potential execution of malicious scripts,...

CVE-2024-51818: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

CVE-2024-54795: Improper Neutralization of Input During Web Page Generation

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting XSS vulnerabilities in the create/edit forms of the worksheet designer function...

CVE-2024-51919: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through = 6.4.3...

WordPress plugin Fancy Product Designer 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Engineering SpagoBI 跨站脚本漏洞

Engineering SpagoBI is an open source Business Intelligence suite based on the J2EE framework from the Italian company Engineering. The suite is mainly used to manage BI objects such as reports, scorecards, and data mining models, which can be controlled, validated, verified and distributed throu...

Schneider Electric Web Designer XML External Object Reference

The vulnerability of the software used for creating automation projects in Schneider Electric’s Web Designer for network modules BMXNOE0110H, BMENOC0311C, BMENOC0321C, and BMXNOR0200H is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows ...