Intern Membership Management System Cross-Site Scripting Vulnerability

Intern Membership Management System is an intern membership management system. A cross-site scripting vulnerability exists in Intern Membership Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

PT-2023-30485 · Unknown · Event Monster – Event Management

Name of the Vulnerable Software and Affected Versions: Event Monster – Event Management, Tickets Booking, Upcoming Event versions n/a through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

CVE-2023-47619

CVE-2023-47619 affects Audiobookshelf up to v2.4.3. The vulnerability allows users with the update permission to read arbitrary files, delete arbitrary files, and make GET requests to arbitrary URLs and read the responses, leading to Information Disclosure. There are no patches listed in the prov...

WordPress Plugin Display Custom Post Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2023-32540 · Unknown · Finnj Frontier Post

Name of the Vulnerable Software and Affected Versions: finnj Frontier Post versions n/a through 6.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker...

PT-2023-30565 · Unknown · Lukman Nakib Preloader Matrix

Name of the Vulnerable Software and Affected Versions: Lukman Nakib Preloader Matrix versions n/a through 2.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

CVE-2023-48234

A flaw was found in Vim, an open source command line text editor. When getting the count for a normal mode z command, it may overflow if large counts are given. The impact is low because user interaction is required and a crash may not happen in all situations. Mitigation Mitigation for this issu...

CVE-2023-48231

A heap use-after-free flaw was found in the vim package. When executing a :s command for the first time and using a sub-replace-special atom inside the substitution, it is possible that the recursive :s call causes memory to be freed, which may later then be accessed by the initial :s command. Th...

PT-2025-26009 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where adding an xattr to an inode does not ensure that the inode size is not less than EXT4 GOOD OLD INODE SIZE + extra isize + pad,...

WordPress Plugin Motors - Car Dealer, Classifieds & Listing Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Motors - Car Dealer,...

PT-2023-32514 · Unknown · Maiwei Safety Production Control Platform

Name of the Vulnerable Software and Affected Versions: Maiwei Safety Production Control Platform version 4.1 Description: A problematic issue was found in the Maiwei Safety Production Control Platform, affecting the /api/DataDictionary/GetItemList API endpoint. This issue leads to information...

WordPress Plugin WP Helper Premium Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-30198

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is an out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions...

PT-2023-18165 · Sim · Sim

Name of the Vulnerable Software and Affected Versions: Sim affected versions not specified Description: The issue is related to a permission bypass that allows evading mobile preference restrictions. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2023-32275 · Viessmann · Viessmann Vitogate 300

Name of the Vulnerable Software and Affected Versions: Viessmann Vitogate 300 versions up to 2.1.3.0 Description: A vulnerability was found in the Viessmann Vitogate 300, affecting some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been...

PT-2023-6372 · Advantech · Advantech Webaccess

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess version 9.1.3 Description: The issue is related to an exposure of sensitive information to an unauthorized actor, which could lead to the leakage of user credentials. This is due to a lack of protection for service data...

PT-2023-6394 · F5 · Big-Ip Local Traffic Manager +5

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions prior to the fixed version Description: The issue is related to insecure privilege management in BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System...

CVE-2023-43361

A buffer overflow vulnerability was found in vorbis-tools. This flaw allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of WAV files to OGG files. Mitigation Mitigation for this issue is either not available or the currently available options do...

CVE-2023-41081

A vulnerability was found in Apache Tomcat Connectors modjk. Affected versions of this package are vulnerable to information exposure in the modjk component. This flaw allows an attacker to exploit the implicit mapping functionality, resulting in the unintended exposure of the status worker and...

VMs fail to boot with error: "SR_BACKEND_FAILURE_46, The VDI is not available"

VMs fail to boot with error: SRBACKENDFAILURE46 ; The VDI is not available opterr='INTERNALERROR', 'Syserror\\n "/var/run/nonpersistent/forkexecd/executecommandgeterrc83846.log: Too many open files"';...