8447 matches found
GHSA-49JP-CGHC-P5PJ JeecgBoot server-side template injection
SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...
LogoBee Cross-Site Scripting Vulnerability
LogoBee is a logo creation software from LogoBee Inc. in the United States. A cross-site scripting vulnerability exists in LogoBee version 0.2, which stems from the use of a special load that can lead to cross-site scripting...
PT-2023-27969 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.3 Description: The issue is an SSTI injection vulnerability that allows remote attackers to execute arbitrary code via a crafted HTTP request to the "/jmreport/loadTableData" component. This enables attackers to...
CVE-2023-50874
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...
CVE-2023-50874
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...
CVE-2023-50874 WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1...
CVE-2023-50874
CVE-2023-50874 is a Stored XSS in WordPress Infinite Scroll – Ajax Load More. The vulnerability stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected plugin/version range: from n/a through 6.1.0.1. The entry is marked as patched; re...
SUSE CVE-2023-51105
A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...
SUSE CVE-2023-51104
A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnmbinaryreadimage of load-pnm.c when span equals zero...
CVE-2023-52075
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...
CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...
CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all...
CVE-2023-52075
The ReVanced API project is affected. The vulnerability stems from the ReVanced API proxy not implementing error caching, which allows repeated request rate limiting to trigger under normal load. As described across sources, this lack of error caching leads to increased server load and results in...
CVE-2023-51105
A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...
CVE-2023-51106
A floating point exception divide-by-zero vulnerability was discovered in mupdf 1.23.4 in function pnmbinaryreadimage of load-pnm.c when fzcolorspacen returns zero...
DEBIAN-CVE-2023-51105
A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...
DEBIAN-CVE-2023-51106
A floating point exception divide-by-zero vulnerability was discovered in mupdf 1.23.4 in function pnmbinaryreadimage of load-pnm.c when fzcolorspacen returns zero...