Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext

Overview Fujitsu Software Infrastructure Manager ISM V2.8.0.060, provided by Fujitsu Limited, stores the password for the proxy server in cleartext form to the product's maintenance data ismsnap CWE-312 under the following conditions. Using a proxy server that requires authentication in the...

PT-2023-5240 · Fujitsu · Fujitsu Software Infrastructure Manager Essential Edition +2

Name of the Vulnerable Software and Affected Versions: Fujitsu Software Infrastructure Manager Advanced Edition version 2.8.0.060 Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX version 2.8.0.060 Fujitsu Software Infrastructure Manager Essential Edition version 2.8.0.060...

Fujitsu Software Infrastructure Manager Security Vulnerability

Fujitsu Software Infrastructure Manager is an infrastructure manager from Fujitsu Japan. A security vulnerability exists in Fujitsu Software Infrastructure Manager, which arises from sensitive information being stored in plaintext in product maintenance data ismsnap...

SUSE-SU-2023:3136-1 Maintenance update for SUSE Manager 4.3.7 Release Notes

Maintenance update for SUSE Manager 4.3.7 Release Notes: This is a codestream only update...

SIMATIC MV540/MV550/MV560 Resource Consumption

The vulnerability of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to an uncontrolled consumption of resources during the processing of IP packets. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

WAGO PLC Malfunction

The vulnerability of the microprogrammed software in WAGO 750-3x and WAGO 750-8x programmable logic controllers is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system...

USN-6203-2 python-django vulnerability

USN-6203-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 ESM. Original advisory details: Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Django to consu...

Cisco NX-OS Software Arbitrary File Overwrite (CVE-2019-1729)

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. These file overwrites by the attacker are accomplished at the root...

CVE-2023-23660

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...

CVE-2023-23660

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...

Sql injection

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...

CVE-2023-23660

MainWP Maintenance Extension for WordPress is affected up to version 4.1.1 with an authenticated (subscriber) SQL Injection vulnerability. The root cause is a SQLi in the plugin that can be triggered by a subscriber. Fixed in version 4.1.2; upgrade to mitigate. Patchstack also lists high risk (CV...

CVE-2023-23660 WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...

CVE-2023-23660 WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP MainWP Maintenance Extension plugin = 4.1.1 versions...

WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)

Software Rocket Maintenance Mode & Coming Soon Page Type Plugin Vulnerable versions = 4.3 Fixed in 4.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bee342469bdf Credits Rafie...

WordPress WP Simple Maintenance & Under Construction Mode Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Maintenance & Under Construction Mode Type Plugin Vulnerable versions = 1.5.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ae5ab24add7b Credits...

WordPress Plugin Maintenance SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

WordPress Coming Soon Page and Maintenance Mode for WordPress Block Editor Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Coming Soon Page and Maintenance Mode for WordPress Block Editor Type Plugin Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

PT-2023-19109

Name of the Vulnerable Software and Affected Versions MainWP MainWP Maintenance Extension plugin versions prior to 4.1.1 Description The issue is related to an authenticated SQL Injection vulnerability. This allows attackers with subscriber or higher privileges to inject malicious SQL code. There...