PYSEC-2023-281

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

PYSEC-2023-281

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

CVE-2023-6709: Improper Neutralization of Special Elements Used in a Template Engine

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

The vulnerability of the OpenCMS content management system, related to the failure to take measures to neutralize specific elements, allows attackers to influence the confidentiality, integrity, and accessibility of information.

The vulnerability of the OpenCMS content management system is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of information...

The vulnerability of the Image Horizontal Reel Scroll Slideshow Plugin lies in its lack of measures to neutralize special elements, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Image Horizontal Reel Scroll Slideshow Plugin exists due to the failure to address the issue of eliminating special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary SQL queries...

The software for Zoho ManageEngine RecoveryManager Plus is vulnerable because measures taken to eliminate special elements used in the operating system commands have not been implemented. This vulnerability allows attackers to execute arbitrary commands.

The software for Zoho ManageEngine RecoveryManager Plus has vulnerabilities because measures to neutralize specific elements have not been taken. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the PostCSS library arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of the PostCSS library exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web portal of the microprogramming software for TP-Link Archer VR1600V (AC1600) allows a hacker to gain access to read, modify, or delete files, execute arbitrary commands, or trigger a service failure.

The vulnerability of the web-based software platform of TP-Link Archer VR1600V AC1600 wireless VoIP routers lies in the lack of measures to neutralize special elements used in the operating system’s processing of the variable XTPIfName. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center, related to the failure to eliminate special elements, allows attackers to carry out “Server-Side Template Injection” attacks.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to carry out an “Server-Side Template Injection” attack...

The vulnerability of the DataLogView.php, EventsView.php, and AlarmsView.php scripts of the microprogramming software for Osprey Pump Controller controllers allows a perpetrator to execute arbitrary commands.

The vulnerability of the DataLogView.php, EventsView.php, and AlarmsView.php scripts of the Osprey Pump Controller microprogrammed software exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

The vulnerability of the remote control function of the PowerStation load balancing system allows a hacker to execute arbitrary commands or cause service failures.

The vulnerability of the remote control function of the PowerStation network load balancing system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands ...

The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the authentication function of ASUS RT-AX55 router software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the authentication function of ASUS RT-AX55 router software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-24176 · Qualcomm · Snapdragon +112

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs when sending an Assoc Request containing BTM Query or BTM Response with MBO IE. This corruption happens...

PT-2023-24184 · Qualcomm · 315 5G Iot Modem Firmware +236

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing WPA IES when it is passed with a length more than the expected size...

The vulnerability of the microprogrammed software for Zyxel NAS326 and NAS542 networks exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows a perpetrator to execute any desired operating system command.

The vulnerability of Zyxel NAS326 and NAS542 network storage devices due to the lack of measures to neutralize specific elements used in the operating system commands exists. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands by sending a special...

CVE-2023-48742

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue...

CVE-2023-31275

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially crafted malformed file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...