1706 matches found
PT-2023-4490 · Igor Pavlov +1 · 7-Zip +1
Name of the Vulnerable Software and Affected Versions: 7-Zip affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this issue, where the target must visit a malicious pa...
CVE-2023-30871
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
CVE-2023-30871
CVE-2023-30871 affects the WordPress plugin Stock Exporter for WooCommerce by PT Woo Plugins (by Webdados). On versions = 1.2.0. If upgrading immediately is not possible, apply vendor-supplied mitigations/patches where available and ensure input/output handling adheres to secure coding practices....
CVE-2023-30871: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin = 1.1.0 versions...
PT-2023-23026
Name of the Vulnerable Software and Affected Versions PT Woo Plugins by Webdados Stock Exporter for WooCommerce plugin versions 1.1.0 and earlier Description The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the...
PT-2023-18066 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a possible code execution due to type confusion, which could lead to remote code execution without requiring additional execution...
PT-2023-5629 · Jpeg · Jpeg
Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a missing bounds check in the jpeg component, which could lead to local information disclosure with System execution privileges needed. User interaction is not needed f...
Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Credentials (CVE-2020-6985)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
PT-2023-6403
Name of the Vulnerable Software and Affected Versions procps-ng versions affected versions not specified Description The issue is related to a buffer overflow in the procps-ng utility, specifically in the "ps" utility, which allows a user to write almost unlimited amounts of unfiltered data into...
Moxa PT-7528 and PT-7828 Series Buffer Overflow (CVE-2020-6989)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code. This plugin only works with Tenable.ot. Please visit...
Moxa PT-7528 and PT-7828 Series Weak Password Requirements (CVE-2020-6995)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access. This plugin only works with Tenable.ot. Please visit...
Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm (CVE-2020-6987)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. This plugin only works with Tenable.ot. Please visit...
Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)
Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Cryptographic Key (CVE-2020-6983)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. This plugin only works with Tenable.ot. Please visit...
Moxa PT-7528 and PT-7828 Series Information Exposure (CVE-2020-6993)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...
PT-2023-37020
Carefully crafted input by an attacker will not be sanitized by this module, which can result in a script injection...
PT-2023-25698 · Sourcecodester · Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue affects the HTTP POST Request Handler component, specifically the file /classes/Master.php?f=save inquiry. The manipulation of the id argument leads to...