12827 matches found
CVE-2022-34672
CVE-2022-34672 affects the NVIDIA Control Panel for Windows. The vulnerability allows an unauthorized or unprivileged user to gain privileges, read sensitive information, or execute commands. The issue is part of a broader set of NVIDIA GPU Display Driver vulnerabilities addressed in the November...
VulnCheck KEV: CVE-2016-10972
The newspaper theme before 6.7.2 for WordPress has a lack of options access control via tdajaxupdatepanel...
NVIDIA Control Panel 安全漏洞
NVIDIA Control Panel is a graphics card control panel from NVIDIA Corporation. A security vulnerability exists in NVIDIA Control Panel, which originated when an unauthorized or unprivileged user can compromise the security of the software by obtaining privileges, reading sensitive information, or...
PT-2022-22285 · Nvidia · Nvidia Control Panel
Name of the Vulnerable Software and Affected Versions: NVIDIA Control Panel for Windows affected versions not specified Description: The issue allows an unauthorized user or an unprivileged regular user to compromise the security of the software by gaining privileges, reading sensitive informatio...
CVE-2019-25092
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
CVE-2019-25092
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
Cross site scripting
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
CVE-2019-25092 Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting
A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function printuseriplog of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entry'ip' leads to cross site scripting. The...
CVE-2019-25092
The CVE-2019-25092 issue affects Nakiami Mellivora up to version 2.1.x, specifically the Admin Panel component’s function print_user_ip_log in include/layout/user.inc.php. The vulnerability arises from improper handling of the argument $entry['ip'], enabling cross-site scripting. It can be exploi...
PT-2022-8304 · Unknown · Nakiami Mellivora
Name of the Vulnerable Software and Affected Versions: Nakiami Mellivora versions up to 2.1.x Description: A problematic vulnerability was found in the Admin Panel component, specifically in the function print user ip log of the file include/layout/user.inc.php. The manipulation of the argument...
CVE-2020-36626
A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function addpostcontentfilteredtosearchsql of the file ModularContent/SearchFilter.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
Sql injection
A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function addpostcontentfilteredtosearchsql of the file ModularContent/SearchFilter.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
FlatPress 路径遍历漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a path traversal vulnerability , the vulnerability stems from the component File Delete Handler in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the function...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a cross-site scripting vulnerability, the vulnerability stems from a problem with the function main in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the component...
Panel Builder 跨站脚本漏洞
Panel Builder is an open source plugin from Modern Tribe Agency. It is used for block content control in WordPress Classic Editor. Panel Builder has a security vulnerability. Attackers use this vulnerability to perform sql injection attacks...
CVE-2021-45467
In CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as demonstrated by a /user/loader.php?api=1&scripts= .%00./.%00./api/accountnewcreate&acc=guadaapi URI. Any number of %00...
CVE-2021-45466
In CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1107, attackers can make a crafted request to api/?api=addserver&DHCP= to add an authorizedkeys text file in the /resources/ folder...
Code injection
In CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as demonstrated by a /user/loader.php?api=1&scripts= .%00./.%00./api/accountnewcreate&acc=guadaapi URI. Any number of %00...
Design/Logic Flaw
In CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1107, attackers can make a crafted request to api/?api=addserver&DHCP= to add an authorizedkeys text file in the /resources/ folder...