PT-2023-7279 · Unknown · Stardom Fcn/Fcj

Name of the Vulnerable Software and Affected Versions: STARDOM FCN/FCJ versions R1.01 through R4.31 Description: The issue is related to uncontrolled resource consumption in the STARDOM FCN/FCJ programmable logic controllers. This could allow a remote attacker to cause a denial-of-service conditi...

WordPress Coming soon and Maintenance mode Plugin <= 3.7.3 is vulnerable to Bypass Vulnerability

Software Coming soon and Maintenance mode Type Plugin Vulnerable versions = 3.7.3 Fixed in 3.7.4 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-49741 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID d62ae4e054de Credits Mika...

WP Maintenance < 6.1.4 - IP Restriction Bypass

Description The WP Maintenance plugin for WordPress is vulnerable to IP Address Restriction Bypass in versions up to, and including, 6.1.3. This can be used to bypass settings that may have blocked out an IP address from accessing a page on the site...

MainWP Dashboard < 4.5.1.3 - Authenticated(Administrator+) CSS Injection

Description The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in all versions up to, and including, 4.5.1.2 due to insufficient input sanitization. This makes it possible for authenticated...

CVE-2023-6164

The CVE-2023-6164 entry concerns the MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress. It is vulnerable to CSS Injection via the newColor parameter due to insufficient input sanitization in all versions up to and including 4.5.1.2 . The issue affects aut...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

Design/Logic Flaw

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

PT-2023-30441 · Mercedes · Mercedes Me Ios App

Name of the Vulnerable Software and Affected Versions: Mercedes me IOS APP versions 1.34.0 and below Description: The issue allows attackers to view the maintenance orders of other users and access sensitive user information. Recommendations: For Mercedes me IOS APP versions 1.34.0 and below,...

CVE-2023-47393

CVE-2023-47393 describes an access control flaw in the Mercedes me iOS app (versions 1.34.0 and below) that could let an attacker view other users’ maintenance orders and access sensitive user data via unspecified vectors. The NVD entry rates it at CVSS v3.1 base score 5.3 (Medium) with network a...

CVE-2023-47393

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors...

Mercedes-Benz Mercedes me Security Breach

Mercedes-Benz Mercedes me is an automotive software from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz Mercedes me v1.34.0 and prior versions, which stems from an access control issue that allows an attacker to view another user's maintenance orders and access sensitive...

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger maintenance failures remotely...

File Upload Vulnerability in Yonghong BI of Beijing Yonghong Business Intelligence Technology Co.

Beijing Yonghong Business Intelligence Technology Co., Ltd. is committed to providing global enterprises with big data technology products and services, relying on independent intellectual property rights of the one-stop big data platform to form a perfect product and service system, with...

Information leakage vulnerability in retail terminal operation and maintenance management platform of Shanghai Bojun Software Technology Co.

Shanghai BJ Software Technology Co., Ltd BJST was founded in 1999, providing digital business consulting and system implementation for large and medium-sized enterprises, supporting the construction of omni-channel middle office, ERP, e-commerce OMS and other systems, covering a wide range of...

CVE-2023-39926

Unauth. Stored Cross-Site Scripting XSS vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin = 2.6 versions...

CVE-2023-39926

CVE-2023-39926 concerns the WordPress plugin “Under Construction / Maintenance Mode from Acurax” (vulnerable:

WordPress Plugin Under Construction / Maintenance Mode from Acurax Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2023-27160

Name of the Vulnerable Software and Affected Versions Acurax Under Construction / Maintenance Mode from Acurax plugin versions = 2.6 Description The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...