3345 matches found
PT-2022-23342 · Unknown · Wha Word Search Puzzles
Name of the Vulnerable Software and Affected Versions: WHA Word Search Puzzles game plugin versions 2.0.1 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...
CVE-2022-37247
Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting XSS via /admin/settings/fields page...
WordPress NOTICE BOARD plugin <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress NOTICE BOARD plugin versions = 1.1. Solution No patched version is available...
Notice Board <= 1.1 - Contributor+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks...
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup Go the DSGVO AIO Settings Cookie Notice settings a...
DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC Go the DSGVO AIO Settings Cookie Notice settin...
CVE-2022-38276
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
NSC* ANNOUNCEMENT FOR CITRIX ADC(NETSCALER) MPX/SDX 14030 FIPS, 14060 FIPS, 14080 FIPS, 14000Z FIPS
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 14030 FIPS, MPX 14060, MPX 14080 FIPS, MPX 14000Z FIPS, SDX 14030 FIPS, FIPS, SDX 14060 FIPS, SDX 14080 FIPS, SDX 14000Z FIPS Note: 14xxx FIPS upgrade SKUs and 14000Z FIPS upgrade SKUs for these models will ...
PT-2022-23823 · D Link · Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue is related to command injection via the "/goform/form2userconfig.cgi" API endpoint. This allows for potential exploitation. Recommendations: For version 1.10CNB04, consider disabling...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
USN-5519-1: Python vulnerability | Cloud Foundry
Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. Update Instructions: Run sudo ua fix USN-5519-1 t...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...