WordPress Plugin Under Construction / Maintenance Mode from Acurax Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2023-27160

Name of the Vulnerable Software and Affected Versions Acurax Under Construction / Maintenance Mode from Acurax plugin versions = 2.6 Description The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...

CVE-2023-39926: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin = 2.6 versions...

The vulnerability of the software for the design, operation, and maintenance of COMOS technological installations stems from lack of access control measures, allowing attackers to compromise data confidentiality and integrity.

The vulnerability of COMOS’ software for the design, operation, and maintenance of technological installations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of data...

WordPress WP Maintenance Plugin <= 6.1.3 is vulnerable to Bypass Vulnerability

Software WP Maintenance Type Plugin Vulnerable versions = 6.1.3 Fixed in 6.1.4 OWASP Top 10 A6: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-47769 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 78ae99fde368 Credits Mika Required privilege...

Command Execution Vulnerability in Green Alliance Operations and Maintenance Security Management System

Beijing Shenzhou Green Alliance Technology Co., Ltd. is a company whose business scope includes technology development, technology consulting, technology services; computer system services and so on. A command execution vulnerability exists in the Green Alliance Operations and Maintenance Securit...

command injection in scp.c

The scp functionality in OpenSSH is vulnerable to command injection via backtick characters in the destination argument. The command will be run with the permissions of the user with which the files were copied on the remote server. To exploit this issue an attacker must manipulate a system...

CVE-2022-46849

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page – Responsive Coming Soon & Maintenance Mode: from n/a through 1.5.9...

CVE-2022-46849: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page – Responsive Coming Soon & Maintenance Mode: from n/a through 1.5.9...

Coming Soon < 1.6.0 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page – Responsive Coming Soon & Maintenance Mode: from n/a...

OPENSUSE-SU-2023:0352-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

OPENSUSE-SU-2023:0351-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2023:0351-1 Rating: important References: 1216363 1216364 1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 NVD : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2023:0352-1 Rating: important References: 1215463 1216363 1216364 1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 NVD : 7.3...

Important: Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update

This is an updated version of the Node Maintenance Operator. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update

This is an updated version of the Node Maintenance Operator. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

Code injection

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...