8881 matches found
PT-2023-27183 · Joomla · Acymailing Enterprise
Name of the Vulnerable Software and Affected Versions: AcyMailing Enterprise component for Joomla versions 6.7.0 through 8.6.3 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. This enables potential attackers to...
AcyMailing Joomla Component 跨站脚本漏洞
AcyMailing Joomla Component is an email marketing component used in the Joomla content management system. A security vulnerability exists in AcyMailing Joomla Component that stems from improper input neutralization and allows cross-site scripting XSS...
CVE-2023-22840
Improper neutralization in software for the IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access...
Input validation
Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...
CVE-2023-31209 Command injection via active checks and REST API
Improper neutralization of active check command arguments in Checkmk 2.1.0p32, 2.0.0p38, 2.2.0p4 leads to arbitrary command execution for authenticated users...
PT-2023-23232 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p32 Checkmk versions prior to 2.0.0p38 Checkmk versions prior to 2.2.0p4 Description: The issue is related to the improper neutralization of active check command arguments, which can lead to arbitrary command...
CVE-2023-39213
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access...
CVE-2023-3651
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11...
CVE-2023-3717
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farmakom Remote Administration Console allows SQL Injection. This issue affects Remote Administration Console: before 1.02...
CVE-2023-3898
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...
CVE-2023-3898
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...
Zoom Client Injection Vulnerability
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability previously existed in Zoom Desktop Client for Windows and Zoom VDI Client version 5.15.2, which stemmed from a special element neutralization improper issue...
a2 License Portal System SQL Injection Vulnerability
a2 License Portal System is a license portal system from a2 License Portal System, Inc. A SQL injection vulnerability exists in a2 License Portal System versions prior to 1.48, which arises from incorrect neutralization of special elements used in SQL commands...
mAyaNet E-Commerce SQL Injection Vulnerability
mAyaNet E-Commerce is an e-commerce platform from mAyaNet, Inc. A SQL injection vulnerability exists in mAyaNet E-Commerce versions prior to 1.1, which stems from incorrect neutralization of special elements used in SQL commands...
PT-2023-4395 · Intel · Intel Onevpl Gpu
Name of the Vulnerable Software and Affected Versions: IntelR oneVPL GPU software versions prior to 22.6.5 Description: The issue is related to improper neutralization in the software, which may allow an authenticated user to potentially enable denial of service via local access. This could be...
PT-2023-4659 · Unknown · Mxsecurity
Name of the Vulnerable Software and Affected Versions: MXsecurity versions prior to v1.0.1 Description: A vulnerability has been identified that allows the unauthorized disclosure of authenticated information. This issue arises when special elements are not neutralized correctly, allowing remote...
The vulnerability of the ML lifecycle management platform arises from the lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary commands or trigger service failures.
The vulnerability of the MLflow model lifecycle management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands or cause service failures...