4368 matches found
WordPress plugin BP Profile as Homepage 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
WordPress plugin Simple Keyword to Link 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
WordPress plugin WordPress Ajax Load More and Infinite Scroll 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
WordPress plugin WP-Addpub 1.2.8 SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
Devolutions Server 访问控制错误漏洞
Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2025.1.7.0 and prior versions that stems from improper access control of the user MFA...
ChestnutCMS 代码问题漏洞
ChestnutCMS is a front-end and back-end separated enterprise-level content management system by liweiyi individual developer. A code issue vulnerability exists in ChestnutCMS 15.1 and earlier versions, which stems from a deserialization issue in API endpoint files...
shiyi-blog 代码注入漏洞
shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. A code injection vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter content...
shiyi-blog 安全漏洞
shiyi-blog is a vue+springboot front-end and back-end separated blog system by bule individual developer. A security vulnerability exists in shiyi-blog 1.2.1 and earlier versions, which stems from a server-side request forgery due to incorrect manipulation of the parameter url...
AudioCodes Audiocodes Mediapack MP-11x 安全漏洞
The AudioCodes Audiocodes Mediapack MP-11x is a gateway device from AudioCodes Israel. A security vulnerability exists in AudioCodes Audiocodes Mediapack MP-11x 6.60A.369.002 and earlier versions, which stems from a specially crafted POST request that could lead to unauthorized code execution...
Yifang CMS 安全漏洞
Yifang CMS is a PHP enterprise website development and construction management system from China Yifang Company. A security vulnerability exists in Yifang CMS 2.0.2 and earlier versions, which stems from a cross-site scripting attack due to incorrect operation of the parameter Default Value...
Argo CD 跨站脚本漏洞
Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. A cross-site scripting vulnerability exists in Argo CD 1.2.0-rc1 and earlier versions, which stems from insufficient URL protocol filtering and could lead to cross-site scripting attacks...
WordPress plugin MStore API 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
GNU Binutils 缓冲区错误漏洞
GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...
Summer Pearl Vacation Rental Management Platform 输入验证错误漏洞
Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. An input validation error vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions, which stems from an open redirect due to the...
Wing FTP Server 安全漏洞
Wing FTP Server is the Wing FTP Server open source suite of cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.4.3 and earlier versions, which originates from the execution of unnecessary privileges...
Summer Pearl Vacation Rental Management Platform 安全漏洞
Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. A security vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions that originates from an authorization bypass issue...
CVE-2024-30543
Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18...
CVE-2024-36531
nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component...
CVE-2024-37154
Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via ClawbackVestingAccount. This affects 18.1.0 and earlier...